We don't know why, all we know it that is takes public naming and shaming to get them to do anything about serious security related bugs (and this is no just for Apple but for most companies).