All these efforts are appreciated, but I don't think the attacker is going to leak their payload after the disclosure and remediation of the vuln.