Bug reports: information or spam?

security isn't the practice of preventing all possible activities (turning the computer off and sealing it in a faraday cadge will do that), it's a matter of managing risk and slowing down the attacker long enough to catch and stop them.

a network that can do some things, but not all things is a very reasonable, and very common situation.