Not every threat actor has access to every vulnerability. The top spies won’t share their best tools with normal cops, for example. They can’t risk their access/methods coming to light for relatively minor reasons. Consider your threat model, and do your best.