Even if it were informative it might me more useful for terrorists than defenders. For example if the market correctly valued hard to fix vulnerabilities then all the market does is help terrorists pick targets (as the market is one big analyst leak and asymmetric warfare is by definition easier for one side).