This is not the answer to this problem. Instead vulnerability researchers should share their findings with potential victims so they can sue rather than reporting to Republican state governments that will simply sue them.

What can the potential victims sue for specifically? Like what is the legal theory there? Which law has the state government broken and how would the plaintiffs get around sovereign immunity? Please to provide citations for the relevant statutes and case law.