Should major hardware/software manufacturers delay telling the public about serious vulnerabilities in the products they sell?