>This kind of thing works when you have a significant lead in the field
No? It works even if the adversary has the same capabilities. It only stops working when everything is fixed.
I'm curious: to any professional vulnerability researchers reading this, what do you think?
Now i know that reality is worse than the worst conspiracy theorist.