How best, or how would one expect the NSA to behave? Where is the balance between offense and defense? On one hand, I can see this exploit needing disclosed to

How best, or how would one expect the NSA to behave? Where is the balance between offense and defense? On one hand, I can see this exploit needing disclosed to the general public. On the other, I can see this being useful for offensive purposes.