This misses the point entirely. Nobody is saying that security researchers shouldn&#x27;t find vulnerabilities.<p>The problem is that rather than publishing or filing a bug, the researchers helped the government exploit it for $1M. Effectively the same as selling the exploit on the black market.