Any 0-days they find can be used on already confiscated devices even if they report them and the manufacturer issues a fix, so their business could in theory still work.