My original comment explicitly said “selling or exploiting them for profits.” You are just ignoring the second half for some reason.

I think you need to breathe a bit and then re-read my comment. I’m not coming at you, I’m saying that what an exploit sells for and what it could cost a company if exploited are entirely different things. That’s where you’re hung up.

Companies have an obvious financial incentive to encourage discovery and disclosure before exploitation.