This. It's the same reason full disclosure works; it forces people to do better.
It has done a lot of good though even though I prefer something like project zero where vendors a given some limited time before the information gets disclosed.
As for this, I'm afraid one of the first results will be that the repo services shuts down the firehose access, which I think is bad. (I think I can see a number of other ways to improve the security that would work better than that.)
The cat is already out and information is contagious / wants to be free.