I know you love asking people this question, so sorry to spoil your fun, but you know just as well as I do that there isn't really a "grey market".

There absolutely is. I'm just not familiar with one that buys these vulnerabilities.