Looks like he's offering help, but probably at a rate for companies.
He's since come forward and said that the threat worked and that Wordpress is going to work on a real patch.
Next issue for those with highly customized Wordpress installations will be Gutenberg, which is Wordpress 5.0s all new page editor system that uses blocks to manage content, rather than the TinyMCE editor.
Times are changing - Wordpress is finally going to evolve.