Because big players can take remedial action prior to the bug being disclosed to protect users - for example, banning a specific framework from browser extensions.