They have become a bit more flexible[0] after the Windows issue. They are still living by the 90 day policy, but baked in some flexibility if the vendor is communicating with them.

[0] http://googleprojectzero.blogspot.com/2015/02/feedback-and-d...