There’s more incentives than pure profit - Government seems capable enough to attract people when it comes to cyber weapons.
Governments aren’t currently making these tools, because until last year, private enterprise was good enough. It still is, minus the dependency on America and its political climate.
Personally - The issue isn’t engineer availability or salary, but committee based decision making.