Can we legally borrow some sploits from TLAs?

[Georgi Guninski]

Public list for this is not a good idea.

Can we legally borrow some sploits from TLAs?

Maybe sufficiently sophisticated honeypot?
(I am not good at this).

Anything already implemented?