Your premise, whether you mean it to be or not, is that if OpenAI wasn't working with researchers to publish vulnerabilities, they wouldn't be exploited. That's false.

(where in the article did you read about OpenAI working with researchers to publish vulnerabilities?)

Yes, exactly, that is my premise (minus the "working with researchers" bit). The current rate of exploitation is direct consequence of actions of Anthropic, OpenAI, Alibaba and whoever else is making these things. How can I know my false premise is true? By looking at the situation just a year ago, that is how!

You are focused on the binary: vulnerability exists or it does not. It can be exploited or it can not.

That is not what is causing the issues!