Well y'all decided that finding and keeping zero-day exploits were more important than contacting the companies to fix them because you looked at both approaches and decided that intelligence gathering scale > cyber security robustness.