I'm guessing you are just trolling, but still going to address this. Every time an american agency finds a vulnerability they are faced with a choice: - Use it

I'm guessing you are just trolling, but still going to address this. Every time an american agency finds a vulnerability they are faced with a choice: - Use it, possibly against foreign targets - Share it with american vendors to make the country and its businesses safer It should be clear that in most cases the value of protecting american interest is vastly more valuable than attacking foreign interests. It's like Clinton lobbying cruise missiles at Afghanistan, whatever they destroyed was worth a lot less than the missile itself. If for example Apple and Google can be protected that is probably worth a lot more than whatever can be gained by using this offensively. And note that every time a cyber weapon is used there is a large risk that the entity being attacked can learn how the attack worked and use this back at your interests.