Mozilla keeps critical security bugs closed to a small-ish group of developers and testers until they are patched. Soon after a patched version of Firefox has been released, the bugs are opened to the public. This has been our policy for about 15 years.