does google’s fuzz program stuff need a commitment from developers to fix things?