I think it's entirely possible that the released exploit and the early released video are independent of each other. The video contains a couple of hints and stack traces, so someone could've used that to pinpoint the problem and write an exploit of their own (or, based on the website it appeared on, had an LLM generate one).

On the other hand, Chainguard did release their patches before the agreed upon time, proving they can't be trusted if you're working on coordinated patch releases. That was an absolute mess.