On the other hand, project zero publishes kiddies-ready exploits for their vulnerabilities

I suppose that you will provide sources for that, don't you?