So let them publish exploit code. What's the problem?