> Why would they use 0days on security researchers. My guess is it's a test with upside

Or just be after the accesses the targets have...