I wrote an article about improving communication of critical vulnerabilities in open source to users https://blog.bolt.observer/p/strengthening-security-in-the-bitcoin