Their stance is limited to opposing 'green hats' who are selling to customers that don't intend on fixing the flaws (buying a hacker's silence) and selling to governments whom intend on using the exploits for clandestine operations.