Should the NSA and other intelligence agencies turn over vulnerabilities to vendors or use them to protect their nations?

Should the NSA and other intelligence agencies turn over vulnerabilities to vendors or use them to protect their nations?