The concept of government contractors is quite common. If zerodium can guarantee auditing and safe zeroday acquisition then I don't see anything different in go

The concept of government contractors is quite common. If zerodium can guarantee auditing and safe zeroday acquisition then I don't see anything different in governments using a broker to attain their exploits. The same attractions would apply as when they're dealing with other government contractors rather than individual actors. The really sad thing here is that those exploits might be put to use against the people of the world.