[Wowfunhappy]

Aside from the harm this could inflict on innocent users, I’m not actually convinced it would cause vendors to change their behavior.

From a business perspective, the reason exploits are bad for companies is because they generate bad press, right? Well, it's not obvious to me that an exploit which was being used in the wild gets significantly worse press than one which was not. There's also the possibility the buyer will reserve an exploit for super-targeted attacks, and the public won't find out at all until year later.