Yes, the market for security vulnerabilities is essentially a protection racket, and everyone knows it.