Sure, but the beneficiary is a company, and publicly held at that. You're alluding that the inverse is true, that not sharing exploits with a company who's sole

Sure, but the beneficiary is a company, and publicly held at that. You're alluding that the inverse is true, that not sharing exploits with a company who's sole purpose is to accumulate money somehow makes you a bad guy. It doesn't. That's like saying I should code for free in order to be a good guy.