The rareness assumption comes about given that the general response to the exploit is a complete blindness to the possibility that it was exploited before it ga

The rareness assumption comes about given that the general response to the exploit is a complete blindness to the possibility that it was exploited before it gained public awareness: There seems to be a complete lack of ability by almost all players to "go back in time" and detect exploits. I imagine a government agency, particularly dealing with revenue, might be a primary user of such a tool, though.