Either way

You can't blame M$ for downplaying the risk, so long as they release a patch. If it's not really a security flaw, then they're nipping unnecessary panic in the bud. If it is, then they've bought themselves some more time to work on a fix - unless this gets used, it doesn't matter if it's a security flaw.

And for the record, I run Linux and watch videos with Xine.