I agree with Matt, but temper that with the realization that a) many of us have private rules which aren't published, and b) the more complex those rules are, the more reliable they can be (ie: they're harder for spammers to fake successfully).
Agreed with both of the above, and I do have many of them myself. Although this is not exactly relevant as this idea is now public and known to spammers.
c) SARE has the ability to modify our rules files quickly, so if a rule works well today, but spammers begin to abuse it tomorrow, by Wednesday we can flip the rule's score to zero or even negative, depending on our spam statistics.
This is true enough, but only works for those using RDJ with the SARE rules.. I for one don't because my security background dictates that I read the rulesets prior to installing them.
(Yes, I'm more paranoid than most. However, just because you're paranoid, don't mean the hackers aren't after you)
