Jeff Jones is a dunce <
whose output needs to be embargoed.
He knows he's lying, but he's paid to do that.
His class has the parity of Exxon-funded global warning deniers.
"In contrast, Jones appears to arrive at 285 days of vulnerability for
Firefox by focusing exclusively on flaws that were considered by Mozilla
and other security experts to be far less severe."
I don't see any outright lying here, just a difference of opinion.