Apple credits people who report vulnerabilities after every update. There are no public comments from Apple aside from those routine acknowledgements.

Apple patched this within days of finding out about it. This press release is about everything other than the strictly business aspect of reporting and fixing a flaw.