Publicly reproducible attacks are great, because now we know where there the problem is and how to fix it.

You can be pretty sure some three-letter agency trash had been already using it around the world along with shady spyware startups.