Identifying vulnerabilities doesn’t equate to exploiting those vulnerabilities on a scale required to steal a national election.

As an analogy, just because my house is vulnerable to break in, doesn’t mean I have been burgalarized.