[schoen]

I think a lot of corporate entities have seen value in having security improve for everyone -- including their downstream users or customers (who might be at risk of phishing) and their upstream suppliers or vendors, whose software they use directly or transitively trust. So I don't think they will all see reason to keep their research secret or to avoid funding things that are open.