Security professionals in almost any field are typically reluctant to talk publicly about what they do. In part, this is because their culture is about shielding rather than sharing information. And there’s always some risk that action will encourage retaliatory attacks.
This is true, it drives me batty as a product marketeer, and biases me towards sympathy towards the open source security community.