This analogy would almost work, but the program actually makes others' computers vulnerable. So, it is more like deciding not to fill out form K7804 if a bunch of people's kids were on top of a schoolbus.

And also, disclosure actually makes attackers aware of the vulnerability. So, it is like informing a radio station which will broadcast out the message. And while many bus drivers listen to this ratio station, it is actually really popular among a set of people who enjoy crashing into misconfigured buses like this to cause mayhem.

I'm not sure how to fit the state sponsored bus crashers into the analogy. Actually I'm beginning to think it isn't a very useful analogy at all.