Are you aware that in recent decades, a TLA would occasionally contact a company and say, "Hey, sign this NDA. We need to talk." followed by "We've observed foreign actors compromising your systems in the following fashion. You need to fix that. Quietly." To which the response is, "Huh. I can see that the attack would work, but we don't see any evidence of it being used."
The general conclusion was that the intelligence services were doing exactly what a rational actor would want them to do in a hostile world.
But yeah, not always.
Biting the hand that feeds IT
