Microsoft has more experience handling security disclosures than any other organization. The GSM manufacturers apparently have very little comparable experience. I'm just contrasting the two.

(I upvoted you; it's a fair question.)