If it was insecure and they found it first, that'd be better than many alternative actors who would eventually find the same exploit.