When systems and code are audited and pentested by third parties, I don't see any benefit of actually making anything public.