&gt; Maybe in that scenario, it would be the author who writes that code who would be protected but the person who executes the deadly code who is breaking the law?<p>How is that not the only sensible outcome?<p>Telling people about vulnerabilities is the only way they can defend against them. Defenders need actual exploit code to test their countermeasures against.<p>The person who uses the exploit to kill someone is the person who uses the exploit to kill someone.