Funny thing is this person doesn’t sell the exploits. They just release them. Which is totally legal btw, Microsoft threatening legal action is just an attempt to intimidate. I’m not even sure selling the exploit constitutes anything illegal as long as you tax those sales proper, as long as you’re not the one using it to gain unauthorized access to a system