Maybe he doesn't want dissident journalists and activists to get spied on and chopped to pieces?
That sounds like a good enough reason to report these bugs for someone with morals.
Dissident journalists and activists can use devices from vendors that care about security enough to run a working bug bounty program.
Unfortunately exercising consumer choice works a lot better in a healthy free market than it does in one controlled by an oligopoly. I totally agree that people should try to avoid buying from companies that do immoral things, but it can be quite hard in a consolidated market.