I wasn't arguing one way or the other on the issue, just reframing it so everyone's on the same page. Devil's advocate: Do you believe that proactive security

I wasn't arguing one way or the other on the issue, just reframing it so everyone's on the same page. Devil's advocate: Do you believe that proactive security assessments would still be performed if each vulnerability found was required to be disclosed as though it had been exploited?