Just because a vulnerability isn't public doesn't make it less of a problem. And now that they've published this, reverting would be asking for people to find it.