I have a hard time supporting any position that argues that the dissemination of information should be illegal. The U.S. government tried a variation of that through export restrictions of cryptography.

I'm not a particularly big fan of firms that sell vulnerabilities (full disclosure: I've never sold any vulnerabilities I've discovered), but I would be incredibly uncomfortable with the idea that there should be a litmus test for what information is safe to trade, and what isn't.