But the story is supposedly about him posting the zero-day exploits, not selling them. It’s in the title.
He also got banned from Gitlab, which isn’t related to Microsoft at all.
I'm not sure if this is an unintentional mistake. Gitlab did not perform a ban. Github performed the ban. Github is fully-owned by Microsoft.
Well, after they didn't pay him for previous bugs. Not an excuse but certainly a reason.
Are you sure?
Ever considered these aren't the full set of exploits the researcher discovered? Or that he can find more since he found these? If I found a bunch, I'd certainly withhold a few as insurance.