That's exactly why there is a black market for 0-day exploits... because they are worth more than what are paid by the companies owning those liabilities