I thought the US govt actively BOUGHT these types of cracks and hacks and used tools that used them.

How do police departments crack open phones?

Does this mean they are breaking the law by buying these exploits?

Is it? Which law is being broken?

Which law does selling a exploit break?