Focusing on zero days that are exploited in real-world attacks can reduce the gap between public and private state-of-the-art software security, making the exploitation of vulnerabilities more difficult, expensive, and requiring more expertise for attackers. Additionally, the industry can mitigate the exploit technique, making public exploits unusable by private actors.