The Zero-Knowledge Threat Actor and the End of Responsible Disclosure