That depends on provable intent,

and your societal goals for ensuring the next exploit is reported, not ignored or shared online.