I see this more like a security researcher identifying a vulnerability in a system, executing a proof of concept, and then disclosing it. This vulnerability is

I see this more like a security researcher identifying a vulnerability in a system, executing a proof of concept, and then disclosing it. This vulnerability is being exploited by worse actors. Exposing the vulnerability publicly may bring about change to make the system less vulnerable.