[vmception]

Governments can offer bounties to find exploits, it is just too public if people know which government is looking for what. It isn't a legal issue.