In other words

They're going to do something that is going to increase security, but they're not going to tell us what they plan to do, other then they plan to do something. Why not just keep the entire thing classified then, they didn't actually release anything of "value" (other then PR value)?

Because... everyone knows that being obscure about what they are doing isn't going to help keep it any more secure. This way people might get some input on how to help, and ya know... actually help.