Worse. It encourages selling them to the black market instead.

The illicit market for newly discovered security vulnerabilities generally pays pretty well, especially if you can demonstrate implementation. The only reason it's not a much bigger problem is that most security researchers have some moral compunctions and the professional desire to fix problems, not proliferate them.

If the companies basically tell the security researchers to pound sand, that encourages making a living elsewhere.