This is precisely on point and is a proven strategy for Google. Chrome is another example. Almost all their big open source projects are to mitigate existing t

This is precisely on point and is a proven strategy for Google. Chrome is another example. Almost all their big open source projects are to mitigate existing threats, and it’s working out very well for them. It’s annoying to see them trying to frame it as a “public service”, but guess that’s how to do proper PR.