This is a very good point and I agree. How is this different from saying "we didn't fix the flaw because people exploit it"?