IMO the rule should be: release everything unless there are strong arguments, to not release specific data sets. These arguments should be transparent and publi

IMO the rule should be: release everything unless there are strong arguments, to not release specific data sets. These arguments should be transparent and publicly discussed. Just saying "it affects public security" is not a strong argument. It should be at least said, why exactly it affects the security. However, there are good reasons, to not publish some data sets.