I think the assumption is that if they have the capability to create this exploit chain, they also likely have the capability to develop others (and possibly have others waiting to deploy if these are discovered and patched).

It's the same with any of these hacking technology companies, they have to keep moving at the very edge of what is possible.