I agree they should have sent a patch to the grub source, but keep in mind big software companies like microsoft, Verizon, … do not allow software developers to send a patch or PR to open source projects. This is because in their contract it states that all code written on and during company times is owned by the company. This means that it is impossible for them to make a patch or PR because it would conflict with the projects licence and fact its open source.
Its a terrible thing, and it shouldnt be, but thats the fact of the world atm.