I think that is the limitation of the discussion on this topic: if you really do something about security, you are not allowed to talk about it, and even less share what happened or did not happen and with what outcome.