Given what is known, does this send a good or bad message to those that identify vulnerabilities.