>How's things? Microsoft does make a point of informing the general public of security concerns in IE/Windows/Mail etc. Is that not similar to listing bugs?

Have an example?

I think what you're talking about is when Microsoft fixed a security or privacy problem and they need to get out a patch for it, they release some information about what happened, but theres never an actual bug list out there for public consumption.