If there are weaknesses in security they should be addressed. If they are not being addressed then it is the job of the press to highlight this.
Why is it always necessary to attack journalists when they discover a problem with the system. It would be much more grown up to solve the problem.