True, but the article is arguing it&#x27;s the FBI&#x27;s failure to <i>disclose</i> the vulnerabilities that is making us less safe.<p>We expect researchers to follow responsible disclosure practices and at least notify the vendor to give them a chance to prepare a patch. I can understand why the FBI might not want to do that, but that&#x27;s where the OP is coming from.