That doesn't make any sense. You want to prep a fix for distribution ASAP, and release it so people can be protected from it as soon as possible. Also many att

That doesn't make any sense. You want to prep a fix for distribution ASAP, and release it so people can be protected from it as soon as possible. Also many attacks are not really feasible to detect if it's happened - that's like trying to know if the mailman read your postcard. You can develop executable scanning techniques, but people are a lot more concerned about preventing it in the first place than catching it in the act. Why would you leave people vulnerable so they can watch data get stolen - instead of just fixing the issue?