And then sometimes you get sued.

Source: got sued by Sony for disclosing that they screwed up their ECDSA implementation so badly that you could compute their private keys (and then putting Linux back on the PS3 using that flaw).

Microsoft not doing that with Xbox (orig/360) hackers is why the Xbox One has really good security. They hired them instead.