if blackhat is wrong nobody will hear about it
if software dev/blue team is wrong, it leaves a giant gaping hole in the system open for anyone to exploit 24/7