This used to be funded by academic and research outfits, functional releases justified their funding and that was enough. But some unethical entities have started paying big money for exploits as weapons, profiting from their put into profitable use. So the academics now just sell them on gray and black market to the highest bidder.