I’ve never liked the term ‘cyberweapon’. It is subtly misleading and gives the non-technical masses misconceptions about how exploits actually work. Cyberweapon implies that exploits are created by governments and let loose on the world, when in reality exploits are existing flaws that were simply discovered by governments or individuals. Exploits are like a serious manufacturing defect in a lock that was only discovered after the fact. I think this misconception has real implications. If you compare exploits to Nuclear weapons, the public reaction will be we need more secrecy and more weapons to protect us from hostile nations. If however you changed the analogy to something like a defective lock, it become obvious that what we really need is openness so exploits can be fixed.