but a lot of this brain drain has gone to private security companies that then sell vulnerabilities to national bodies. (Like the one in Israel that sold a load of 0day exploits for the iPhone to the CIA)