This is true. But, it seems a waste for the hacker to spend so much time working on a problem that would already be solved if they used a vendor that specialised in what they wanted to achieve.