Yes but they’re are paying for a proven exploit, not sinking money into R&D