I agree with you that we should fix problems. But I am not sure about no sharing of resources, no double-checking whether they are stepping on each other's toes

I agree with you that we should fix problems. But I am not sure about no sharing of resources, no double-checking whether they are stepping on each other's toes. Are you trying to say once we discover a flaw, we just report and have developers to fix it, and don't mention it? If so, there is zero way to avoid that. In fact, any company that keeps me away from their product updates is not doing a good job :/ And to the "acceptable risk." I find irony when the government says that =. People often say how companies like Ford or Google or Apple are spending millions in Washington trying to get the WhiteHouse and the Congress to do something "better". The fact that the government and many Congressmen believe that national security requires people to keep exploits a secret for national defense is putting the government, the Army, big corporations and everyone else business at risk.