The fear is justified though. We fix security holes because they are security holes, not because they have been exploited before.

Seconding this: you don't try and fix things after the damage has been done, you try and anticipate _where_ and _when_ the damage could be done. In this case, giving a foreign _adversarial_ (<- emphasis) government significant leverage over citizen sentiment is a massive security hole.