If one of the smartest computer security guys was prepared to do all this work and throw lots of expensive experts (well grad students) at finding your bugs - would you:
1, Send developers to all their seminars to learn something
2, Buy them drinks
3, Sue them