Needless to say, but analyzing the patch and writing the exploit is a lot more involved than copying, compiling and running an exploit, like 90% of the attacker

Needless to say, but analyzing the patch and writing the exploit is a lot more involved than copying, compiling and running an exploit, like 90% of the attackers (script kiddies) do. What they did here was simply irresponsible at best.