Yea the second gray hat is most definitely black. That's not morally questionable, you sold a vulnerability to a bad actor, anyone can see that that is illegal.

Leaking documents like snowden is an actual moral gray area.