If Facebook and Google’s recent security debacles proved anything, it’s that disclosure is tricky business.