I struggle to understand that logic > firstly, not many people outside the security world knows that bugs are a valuable commodity for attackers. Same thing wi

I struggle to understand that logic > firstly, not many people outside the security world knows that bugs are a valuable commodity for attackers. Same thing with internal orgs diagrams which are something you can sell to economic intelligence firms. All you need to realize its value is read some security related news for a week. Also you can have security_interested people apply to FAANG and then cause harm. >secondly, top-tier orgs like FAANG usually peppers a lot of telemetry around known bugs in production code in order to see if someone isn't exploiting them (or simply to better track down the root cause). As you said - around known bugs, so it's irrelevant here