“We discover if we find bad things, and if we're finding some bad things that we wouldn't otherwise have found, then that's good.”

Transcript evidence from Adam Shostack -- Fast, cheap and good threat models.