Susan Collins actually said...
But if it is sufficient to cause a business to no longer do business with that entity, it is sufficient to wave a red flag at those who would do us harm.
Context
Collins warns that revealing vulnerabilities could alert threats to infrastructure.
05/22/2011