The line of thought is that a slow response makes the time windows of an eventually found vulnerability exploit longer. Thus, increasing its value.