Keeping information under wraps just encourages more security theater, like people believing that locks actually work to deter skilled attackers, whatsoever. They really don't. They deter casual attackers at best.
This is probably less security theater and more not-getting-sued theater.
This is probably less security theater and more not-getting-sued theater.