Maybe I'm being naive, but this sounds a lot like critical software that, if compromised, could be a danger for our society. You would definitely want that piece of software to remain as secure as possible: open source is definitely the way to go!
The relevant buzzword is full disclosure. Even I'm not sure if you can take that so far, but I'm pretty sure that if this is released, nobody ever gets to complain about someone publishing an exploit for their personal project, because that's nothing in comparison.