Ya, they generally don't release things until someone else publically posts similar info or files and then PDX usually 'PROPERS' the initial release with theirs. I agree with you in that it will be a constant cat-and-mouse game (ala PSP) but Paradox can hold off as long as they wish, or release nothing at all if they are satisfied with the 'XYZ group' release- the ball is in their court.
It is, however, naive to think a new PS3 hole/exploit will be discovered "2 days later" though... sometimes it happens, other times it doesn't. If I was PDX though, I'd wait until at least my country had the PS3 released before sharing any loader... this way, their families and friends etc can all get a PS3 with like "v1.75 FW" (or whatever version it's on when the EUR release transpires) and be able to run the PS3 back-ups without any waiting. Time will tell... the absolute BEST thing that can happen for end-users seeking a PS3 iSO Loader though (mark my words) is for another person/group to leak info on the current hole/security flaw that exists in v1.00-1.32 as only then will Paradox even consider sharing their own work once it's public.