Well if you assume everyone has already been exploited, disclosing quickly vs slowly won't prevent that.

Also, if something is being actively exploited, usually there's no or very little embargo.