No, that's perfectly ethical compared to betraying the company that employes you, because: * The money otherwise goes to the pockets of completely-useless

No, that's perfectly ethical compared to betraying the company that employes you, because: * The money otherwise goes to the pockets of completely-useless C-suites. * The exploit is likely out anyway. * Nation state actors may indeed prevent yet another 9/11 attack. In worst case they don't use it to spread ransomware.