Earlier quoted context omitted.
Ok, so you're walking down the street with a locked phone in your pocket. I send an Android Bluetooth 0-day payload to your phone. Nothing wrong with that, after all I'm just asking your phone if it wants to copy some bytes, and it says 'sure!'. Not my problem if your phone does something funky with those bytes. Now I have root, and copy off all of your pictures and private data onto my device. Nothing wrong with tha…
The crime here, in my mind, wasn't posting bytes on a website, but was breaking into someone's phone. Which is already illegal.
That second person did nothing wrong?
Also, did I really break into the phone? I just hypothetically asked if it wanted to copy some bytes, and it said yes.