This seems bad on a few levels. From an internal security standpoint, the organization is more vulnerable. From a software vulnerability standpoint, what good

This seems bad on a few levels. From an internal security standpoint, the organization is more vulnerable. From a software vulnerability standpoint, what good can come of this? Who wins when signit says "don't you dare close that hole!"? As a company, why would you want to be mixed up in that?