From my experience, the safeguards only come up during exploit development. You are free to do reverse engineering and even the first half of vulnerability rese

From my experience, the safeguards only come up during exploit development. You are free to do reverse engineering and even the first half of vulnerability research (i.e. vulnerability discovery) and it only stops once you want it to actually write the exploit.