If you aren't a high profile target, you may not be worthy of being targeted specifically. Of course, as in the Ashley Madison and Equifax cases, you might be compromised along with thousands of others.

Zero days are expensive for individuals and small companies, but what happens when state actors are involved?