One, it seems reasonable to assume that an entity willing to pay $1+ million for a zero-day will generally want to buy another one not too far in the future. Th

One, it seems reasonable to assume that an entity willing to pay $1+ million for a zero-day will generally want to buy another one not too far in the future. The recourse would be no longer selling to them. Two, there wouldn't be much recourse against any entity in the market for $1+ million zero days, just look at Pegasus' customers.