We need both. It's not a binary choice.

We shouldn't enable companies to sell cyber weapons to regimes who use them against innocent people. You can debate where that line is all you want, using it to murder journalists in other countries who are critical of your regime is across that line wherever you may draw it.

We also should encourage better privacy and security to protect everyone's communications and data.