I had a similar reaction for a second, but that's the old security through obscurity concept again, which has served us so well in the past (I'M KIDDING!).

The abuses for the bad code are many and varied and really not that difficult to devise either (even I understand them!), so the solution is to try to inform (and perhaps frighten) those responsible for insecure code so that the holes can be repaired, rather than to pretend that the abuses can be kept secret.

(my $0.02, and that's Canadian dollars!)