This is a foundational policy question in security research, and Project Zero gives a lot of detail on its aproach, e.g. https://googleprojectzero.blogspot.com

This is a foundational policy question in security research, and Project Zero gives a lot of detail on its aproach, e.g. https://googleprojectzero.blogspot.com/p/vulnerability-disclosure-faq.html https://googleprojectzero.blogspot.com/p/vulnerability-discl... https://googleprojectzero.blogspot.com/2020/01/policy-and-disclosure-2020-edition.html https://googleprojectzero.blogspot.com/2020/01/policy-and-di...