> earned an opportunity to write the patch themselves

Doesn't work that way when it's declared a security problem. Fix ASAP is the only way forward for those.