I took his statement about "supplying exploits" as turning over information about new discovered exploits before they release a patch. Which we recently learned that microsoft is doing this.