Depends who they're willing to sell to obviously. If they're only looking to sell to governmental agencies, it should be easy enough to confirm the people they'

Depends who they're willing to sell to obviously. If they're only looking to sell to governmental agencies, it should be easy enough to confirm the people they're selling to are such agents. It's definitely true of a $10k exploit which might be readily available on the market, but for something more unique like this they might be more selective with their buyers to protect future profits.