Almost like his behavior is actually rational and good.

You may not be familiar with security, but this is very normal. Vuln disclosed, time given for patching, then disclosure. Very basic stuff

Whats not normal is Calle crying like a little bitch because hes not competent enough to build non-custodial solutions lol