Do you think NSA and CIA doesn't do the same? They even buy zero day exploits from hackers so they can use them themselves against other countries. How do you think they made Flame work? And these guys are "Government sponsored hackers" too. In fact they are even hiring for this right now.
That's sort of my point. If there isn't aren't independent security researchers who make a stink about security issues thus causing them to be fixed then these government organisations will be the only ones with knowledge.
