Badly worded, sure: a bugzilla link is not a good changelog entry. But we
have plenty of bad changelog entries from people who haven't yet got up to
speed or are in a hurry (perhaps because, well, they just found a nasty
crash bug and want to fix it sharpish). Bad changelog entries do not
conspiracies or intentional concealment of security holes make. You're
assuming malice without cause.