[kristofferR]

They wouldn't boast about it directly, simply having a bug bounty where no bugs were found/reported would do the boasting for them.

[chris_wot]

The publicity wouldn't be as effective. However, I can't see them doing this.