See there are several issues with what he said. There is going to be a group of people who hold him to the 5 year deadline and complain if he doesn't release it within the allotted time. Then there is going to be another group of people who update then complain once said exploit is eventually released.