Shadowy brokers are buying up impractical exploits by mistake seems like an essentially unfalsifiable claim.