Are we sure the governments don’t already do this? The difference between the US and Germany is that the NSA doesn’t alert the company there’s a security hole.

Are we sure the governments don’t already do this? The difference between the US and Germany is that the NSA doesn’t alert the company there’s a security hole. The NSA has been found multiple times to be exploiting exploits under the pretenses of catching terrorists. Arguably, by not telling companies about holes in their systems, they are doing the exact opposite of what they were founded to do: secure the US.