[Torwaldson]

Cyber security experts, former U.S. intelligence officials and former ArcSight employees said the practice could help Moscow discover weaknesses in the software, potentially helping attackers to blind the U.S. military to a cyber attack.
“There are security aspects of those disclosures (and) they are problematic,” Joyce, a former hacker at the U.S. National Security Agency, said at a Washington Post Cybersecurity Summit when asked specifically about the story.
He added that he was more concerned about the intellectual property risks associated with the reviews, however:
https://www.reuters.com/article/us-usa-cyber-russia/foreign-government-code-reviews-problematic-white-house-cyber-official-idUSKCN1C829R