Doesn't the NIST in the US publish a database of vulnerabilities? https://nvd.nist.gov/developers/vulnerabilities

That's a bit of a false dichotomy. The majority of people that would be working on the warbond (marketing, artists, system designers, etc) wouldn't be able to fix whatever bug made you fall out of your ship. They should still absolutely fix the bugs and crashes and everything else but most of the effort that went into the weapons isn't going to detract from fixes and quality of life.

Wouldn't that be in front of the blinds?