I think the idea is based on the concept of taking a bomb on a plane

I think the idea is based on the concept of taking a bomb on a plane, so that you know that if there is a bomb, you have it and you know you won't set it off.

The idea here is that since there are going to be n security flaws, Microsoft might as well know where they are, so they put in deliberate ones.