I would naively expect finding and exploiting to be related. Leaving this comment so someone can correct it, which would be interesting.