I am very wary of suggesting that additional burdens should be placed on people who write software for fun, and release it under FOSS licences: that, to me, already feels like a significant public good.
But I've also heard arguments that made me think, that releasing insecure but readily deployable software is worse than releasing no software.