I don't think that's accurate, either. NSO Group sold their exploits to several other nation-states, seemingly without much (any...?) vetting concerning the ethics of their government.

> seemingly without much (any...?) vetting concerning the ethics of their government

I’m not trusting in ethics. I’m trusting in commerce.

MIE should drastically reduce both the production rate and lifetime of zero days. That, in turn, means a focus on maximising profit per vulnerability versus process line.