[tsimionescu]

Except of course they don't know what vulnerability is getting patched. So, they might actually end up revealing a different vulnerability.

[rowanG077]

Of course. It's a risk that could easily be worth it depending on the actor and vulnerability