[thesuitonym]

Your premise is flawed. Reframe the question like this: Should the US be the sole arbiter of software vulnerabilities? Absolutely not! But that doesn't mean the US should cut off the spigot. Other countries should start their own version of CVE, so they can check each other's work, and disclose vulnerabilities that certain governments may desire to keep secret.