Not exactly - the economics are important. Anyone who builds an exploit like this is not going to waste it. It's either going to be used in targeted attacks, o

Not exactly - the economics are important. Anyone who builds an exploit like this is not going to waste it. It's either going to be used in targeted attacks, or reserved for pwn2own. They're not going to burn it by leaving it on some hacked site to get used on your grandmother. Those types of attacks happen after the exploit is already known and has patches available. The good stuff trickles down, and the early days of active exploitation are more or less restricted to those with the deep pockets and legal impunity.