In this case, there's no "sharing" of code. They're selling 0-day exploits, which is considered bad form by many in the security industry. If Kevin were sharing

In this case, there's no "sharing" of code. They're selling 0-day exploits, which is considered bad form by many in the security industry. If Kevin were sharing the exploit code publicly, so that the associated vulnerabilities could be properly fixed and defended against, there wouldn't be such backlash.