Nightmare Eclipse incident shows the researcher-vendor fights may never fully go away