Presuming the USERS don't ALREADY have a problem is the inherent flaw in your logic. A researcher who earns no money finding exploits is at an inherent disadva

Presuming the USERS don't ALREADY have a problem is the inherent flaw in your logic. A researcher who earns no money finding exploits is at an inherent disadvantage to black hats who DO get funding for selling the exploits they find.