We need to operate with the assumption that all vulnerabilities that can be exploited for profit, will be. People will be people. The only answer is mechanisms that make it less profitable.