If weaknesses can be known in advance, then they can "just" be incorporated into the training environment. Unless you can feed the sensors "false" data, there aren't necessarily that many possible exploits.