If they publicize the vendor, it's that much easier to find worms which that particular database doesn't detect and use them, isn't it?