What? It's bad for security bugs to be exposed to the public rather than to have people silently exploit them?