It might not be lying... he might me a complete idiot!

If it took me a month to patch a data leak vulnerability on a web app, I'd resign, and probably retire... That's an embarrassing timeline, and the people involved should feel bad.