Comment by tonetegeatinst

Wouldn't the legal definition of "restriction" also include the laws covering computers etc?

A technicality but one could argue that if the law is the only barrier to exploiting something then the vulnerability needs to be fixed and proven, which a US citizen can not do.