> If *any* threat exists, > that threat is increased by public exposure of unmitigated attack > methodology I think you have it wrong. Public exposure increases the visibility, and therefore customers install the patches quicker. Without public visibility, they will keep running the old code.