If you sell something for 1 billion, would you tell gov/IRS you got paid that ammount?
Its more beneficial to report the amount for taxes, how much you wind up paying is a separate matter, but you need to report it to create the deductions
Apple pays 2m for 0-days now, but I bet kings pay better yet.
History has documented what sort of player they are, I suppose it says something of the times that they still operate/proliferate with impunity.
Software exploits are not munitions and are not controlled, they are not illegal to find, they are illegal to use, hence why there is a market for selling them to sovereigns who have immunity from criminal liability
Shifting liability until it reaches the end user who has no liability or takes the risk