So basically, you don't have to be a great security researcher to create change, you need to be great at PR. The hacker in the shadows finding vulns for fun and getting companies to make patches is still the unsung hero.