Remember Risto issued the 4 - 8% proclamation of the likelihood of a BCX attack while the 72 hour deadline was ongoing. One could ponder if this might have caused BCX to not call off the threatened (unconfirmed) attack. There was some progress on trying to find any vulnerabilities, so perhaps one could ponder if he might have called off the threat citing progress and cooperation.
The reason for not just handing over the vulnerability and fix, may be to illustrate the competence and to teach the community.
Are you suggesting Risto should feel guilty for BCX's continued wrath?
Were we looking for vulnerabilities with a BCX quota?
The ALLEGED vulnerability.
But you are otherwise an excellent devil's advocate.
My more substantive post is here in case you missed it on the previous page
...
Edit: I think I know exactly what your mistake is. You assume the sample in the screenshot is uniformly sampled. But it is not, because it is chosen adversarially, to prove the point BCX was making (that is it a strange ocurrence).