https://de.wikipedia.org/wiki/Vorbereiten_des_Aussp%C3%A4hen...

"(1) Any person who prepares a criminal offence [Wer eine Straftat nach] pursuant to Section 202a or Section 202b by: 1. passwords or other security codes that enable access to data (Section 202a (2)), or 2. computer programs whose purpose is to commit such an act, manufactures, procures, sells, transfers to another, distributes or otherwise makes available, shall be punished with imprisonment of up to two years or with a fine. (2) Section 149 (2) and (3) shall apply mutatis mutandis."

Not sure how this is twisted into opening devtools.

"Among other things, criminal charges were filed against the Federal Office for Information Security, as the office allegedly violated the law itself." But were dropped. Sounds like this is a vague law that can lead to a lot of harassing intimidation, followed by cases being dropped.

Substitute later parts with earlier parts they refer to and it's much clearer: "computer programs whose purpose is to" "enable access to data", when used "[to prepare] a criminal offense". I guess it depends on what the vulnerability was.