Maybe you can expand on why slowing down exploit dev is written off as zero value? If you're writing a zero day, I can certainly concede that this week vs next

Maybe you can expand on why slowing down exploit dev is written off as zero value? If you're writing a zero day, I can certainly concede that this week vs next week has no practical effect. But most users' exposure to vulnerabilities comes in the window between patch released and patch applied. It takes some amount of time to reverse a patch and develop an exploit, and users are racing against that time. The difference between just 24h and 48h can matter, no?