Yes, and my argument is that providing a working PoC along with a patch has at least these immediate benefits: 1) It helps admins verify that the patch was suc

Yes, and my argument is that providing a working PoC along with a patch has at least these immediate benefits: 1) It helps admins verify that the patch was successfully applied. 2) It gives security researchers more surface area to evaluate when looking for similar bugs or bugs in the patch. I'm not asserting that there are not negative aspects, but in the majority of cases waiting for some indeterminate time before releasing a PoC or not releasing one at all is net negative.