No, they are more like a 200-car freight train than a sportscar that can turn on a dime. I suspect just getting the problem into the backlog could chew up weeks.
Then they need to fix their process to be more agile in response to urgent problems.
Not every hacker is going to be nice and give 90 days notice. Sometimes the first notice you'll get is when a vulnerability is already being exploited in the wild. And if you takes you weeks just to begin to respond to that, then that's your problem.
