> Facebook owns those vulnerabilities since they wrote the code :)

However, vulnerabilities are worthless. It's the exploit that has value, and you wrote the code for that.