How so? In your own words:
someone else filed the CVE.
Having someone else override Poettering does not mean "Pottering did not refuse". It simply means saner heads prevailed.
You don't win a pwnie for high quality code, and the vulns they listed (as well as ones discovered subsequent to the award) all smack of low quality code. As the lead of a core piece of technology I expect more than childish whinging about how "CVEs aren't our currency". You like Pottering, great. I don't, and more to the point I don't like the results of his influence on Linux. When posed the question "why not switch to Linux now?" systemd is high on the list of reasons.
I was a happy Upstart user before Upstart threw in the towel too.