Or by organizations that already have those vulnerabilities and keys in place but haven’t publicized them to maintain an advantage. Aka intelligence agencies