It's not an unpopular opinion, it's the opposite of disclosure. It's not an opinion, but a different ethic in the vein of "no-disclosure".
Who discovers it or if you can prove it was abused, is not relevant to the security issue.
Who discovers it or if you can prove it was abused, is not relevant to the security issue.