Nondisclosure prevents end users from mitigating an unpatched vulnerability, and only protects them if nobody else has found it.