Not that it would really help...
But it would seem getting the UN to come up with some disclosure rules for countries would at least give everyone a straw man to point to and say "Not reporting discovered vulnerabilities is a violation of UN..."
But it would seem getting the UN to come up with some disclosure rules for countries would at least give everyone a straw man to point to and say "Not reporting discovered vulnerabilities is a violation of UN..."