> The only way Apple could make them report the vulnerability is if the bounty was not far from the amount of profit that NSO is making with their software. At

> The only way Apple could make them report the vulnerability is if the bounty was not far from the amount of profit that NSO is making with their software. At which point it becomes cheaper to buy a law to force disclosure of those 0 days to vendor?