Leave the security community out of it. Your rhetorical questions are not at all settled dogma in the community. > Why are full disclosure policies recommended

Leave the security community out of it. Your rhetorical questions are not at all settled dogma in the community. > Why are full disclosure policies recommended by security researchers? This is still a somewhat controversial issue. Coordinated or "responsible" disclosure appears to be advocated by most security researchers. Meanwhile, the full-disclosure mailing list still exists, but the activity on the list is far lower than it once was. > Why is open source healthy for security in general? This is also controversial. Open source software has its fair share in-the-wild 0days. The "many eyes" theory only works if there actually are many friendly eyes, and so far, it seems like that is not true. Nobody does this crap for free. > Why is "security through obscurity" frowned upon? Because it is important to be able to discuss threats in order to better protect yourself from them. "Security through obscurity" does not come from the "information must be free" community. The phrase comes from the idea that you should assume that your adversary knows everything about the defenses you have set up.