Please speak openly about that on your dev page Manage expectations.

Why not. I can't force you to do your volunteering work.

I would like them to publicly state that there are not enough hours in their day to fix this, therefore it will have to wait until they get to it.

Why complain about pressure from customers then?

Why does google simply build their own ffmpeg from source without the codec?

They almost certainly do. But it's also in the public interest to responsibly disclose vulnerabilities in components that don't directly affect you.

Mark it low, and estimate by when it can be fixed (3, 4 months from now). Advise google of it. Google does not need to disclose this bug that fast. If I do something one the side or as hobby and big corp comes by to tell me to hurry up I feel inclined to say no thanks.

Linus does...

You can wear your secret cape with pride, don't worry about the moocher badge.

Why not just turn it off and say we need money to turn it in again?

That might work, but the second order effect would probably be companies trying to do the work of time synchronisation themselves in case it happened again. That would lead to fragmentation and incompatibility.

The cloud providers already use their own NTP infrastructure. Much of it is public and you can use it for free, too.

Turn what off?

Time itself maybe, I know I could use with a little bit of a pause.

I really enjoyed the first part (say 2-3 weeks) of COVID lockdowns, we had the longest in the world here and it got pretty old by the end of it, but the first few weeks, no traffic, no noise, quiet city.

It was like a vacation for our heads.

Not sure how, but a yearly "lockdown vacation" would be a Good Thing for our cities (IMNSHO).

Return to the basement now. No escape.

pool.ntp.org dns resolution and any servers that they control, presumably

The ntp pool is actually independently run and funded and has nothing to do with the NTPd implementation nor the NTP Foundation, other than them allowing the pool to use that DNS name.

A post it with master password on the fridge seems much safer to me than simple repeatedly used passwords. Computer can get hacket but the post it on the fridge is harder to hack.