Between a capability being disclosed and being accessible to defenders, there is a vulnerability window. Automated attackers will exploit it faster than defenders can patch.