You seem to confusing criminal federal law concerning unauthorized computer access with a civil federal law regulating the trade of software vulnerabilities, wh

You seem to confusing criminal federal law concerning unauthorized computer access with a civil federal law regulating the trade of software vulnerabilities, which is what you'd need to solve the "problem" you are complaining about.