If they tell everyone exactly how to trigger the bug before they finish rolling out a fix, people will trigger it on purpose to bring down websites.