Well, the authors stated that they will publish the bugs.

Further, publishing a program like this has the potential of finally having software that is not easily exploitable (eg. by requiring every Debian software to pass that program).

Now that it is closed source, only a selected set of people will be able to benefit from it.