Surely we won't use the confidential tag on a bug that can easily be exploited
Considering its easy to spot and we've been given the green-light to punish those that use it, its not that big of a deal.
Also i'm pretty sure EMP is already looking into this and has refunded joshua