We investigate: why an iOS exploit might be worth $1m, why you might not tell Apple, and whether that would be for the greater good of all.