It appears emailing security@linksys.com does absolutely nothing. Do they just pick and choose what to ignore maybe?

This is such a simple hack that anyone could exploit it, and the public weren't even aware of it because ZDI was following responsible disclosure, only to be ignored.