Rule #1 for managing products with grey-market applications: never acknowledge the existence of the illegal market (or any activity that opens you to up to material civil suits).
That instantly exposes you to all kinds of criminal and civil liability; the fact an individual said it vs. "the company" likely makes you personally liable as well, the corporate veil won't help you much here.
You're not making cheap guns for gang members to kill people with, you're developing affordable security options for lower income citizens who are exercising their 2nd amendment rights.
You're not creating tools that help criminals hide their past, you're helping good people clear their record from legitimate mistakes and errors... or evade privacy invading snoops... etc.
Always talk about the white hat applications, never the sinister ones...