At what point are western governments going to crack down on companies such as NSO Group?
On a completely unrelated note, if I were a security researcher, I'd start being extremely mindful about to whom I'm selling zero-days.
Unless you're dependent on the money, responsible disclosure is probably the most ethical way.
If this bothers you the best thing individuals can do is invent better computers.