very little? nsa loses both the ability to use their classified exploits when they're burned (or at least use them as effectively), and they lose out in the PR arena for looking like they can't keep a lid on their own secret weapons, at everyone else's cost. those are extremely severe costs, particularly the latter. i really can't think of any potential upside that isn't trivial in their shadow -- the $30k in bitcoin ransoms people have ponied up?
> the $30k in bitcoin ransoms people have ponied up?
Smokescreen for your $N if you're a rogue agent selling your exploits to another organization - or simply claiming some part of the ransomware pie? Just because the NSA as an organization is paying the price, doesn't mean you as an individual agent are.
Of course, this requires the gumption to think you'll get away with it.