User's care about bugs, leaks, etc.?????
However, there is a fear this practice will discourage organizations from looking in the first place, in order to avoid any negative headlines when they publicize their bug discoveries.
That's a false sense of reality. Imagine the turmoil if an unpatched bug hit hard or they gave away (sold) the info like FB did? Oh wait, users didn't bail out en masse so no fear of publicizing bugs then.