I doubt it's been stalled because the government still wanted to exploit it. I think it's rather them not wanting past use to be detected. You can't always sto

I doubt it's been stalled because the government still wanted to exploit it. I think it's rather them not wanting past use to be detected. You can't always stop using a 0 day. If the binary is deployed somewhere on a air gapped host computer that still receives updates, it's out of your hands. How can you be sure the update will get there while the binary is still on the computer? You risk detection which is very very bad when you run an APT. The tiny part of the campaign can make an entire country or even group of countries adopt stricter policies. The government probably knows about enough holes to fix their malware promptly, but even if it does, it needs to "deploy" the fix all around the world otherwise it risks being noticed.