When “No Exploit” Becomes One