"there's not much they can do" is a defense.
Responsible disclosure protocol:
1. Report the bug
2. Keep confidential until devs have time to take action for prevention (and in this case, remedial action)
3. Devs reach out to possible victims to update them
4. Confirm that measures in (2 and 3) took place and harm has been minimized
5. Disclose to the public
Clearly Odell did not do steps 3 and 4 that and possibly let people generate insecure wallets for 5 years. You are doing mental gymnastics to defend someone that doesn't deserve it. Stop coping.
