Claude Found 500 Zero-Days. Who Patches Them Before Attackers Arrive?