At the very least, they should at least create some honeypots to know when those exploits are being used by others...