a lot of these companies sell to people with money. its just that ordinary folks cant afford million dollar contracts. there are varying degrees ofc. not every

a lot of these companies sell to people with money. its just that ordinary folks cant afford million dollar contracts. there are varying degrees ofc. not everyone is NSO group or such ex intelligence folks. many sell licenses to red teams and security service providers (and law enforcement in some cases). private intelligence companies use such tooling to gather information on individuals for business and private customers too. a lot of toolkits also allow to just add your own exploits via scripting etc. so you can get exploits in 1 place and tooling in another etc. there are laws, but those are not everywhere, and its unclear whos dealin to who in a lot of cases