I think it is legal, in part because the US still lacks data privacy and security regulations. In fact, I am quite sure the government allows persons who have w

I think it is legal, in part because the US still lacks data privacy and security regulations. In fact, I am quite sure the government allows persons who have worked for intelligence agencies to gain employment in private corporations to develop and exploit 0-days, for use by corporations and the government alike.