I’m mostly talking about after, but it would be even more interesting if there are examples of high value mobile exploits being used as 0-days by more common cybercriminals as opposed to government backed spyware firms.