"Right way" == the implicit duty to the public's safety is followed. For Professional Engineers this duty is explicit in their license. Coordinated disclosure &

"Right way" == the implicit duty to the public's safety is followed. For Professional Engineers this duty is explicit in their license. Coordinated disclosure & full disclosure are the usual ways this can happen. "Wrong way" == the duty to the public's safety is violated. Selling exploits to ransomware groups or other criminal organizations is one way this can happen.