That's already happened. Virtually. See the millennium challenge.

So what it happens there'll be very clear documentation that they were aware of the vulnerabilities, but ignored them.