I think they are referring to secretly regression testing other peoples code (to check if patched exploits become exploitable again).