How much time did they save if they didn't find any vulnerability? They just wasted someone's time and nothing else.