I just finished reading "Zero Day to Stuxnet" and I'm really wary of this. The US government has groups that protect its citizens against cyberthreats and also

I just finished reading "Zero Day to Stuxnet" and I'm really wary of this. The US government has groups that protect its citizens against cyberthreats and also groups that exploit vulnerabilities. Those groups apparently communicate with each other. If there is an ongoing operation that exploits a vulnerability, some groups can veto its dissemination. How long would it be before the exploitation group starts mining this kind of data to find a way to attack an enemy? On top of that there is strong evidence that defense contractors are selling these exploits to governments for use. What's to stop data collected this way from being shared with those contractors?