If more money is thrown at the people finding the vulnerabilities so they responsively disclose would it make NSO’s business model unprofitable?

Sounds to me like the best approach to shutdown the NSO group is to make the economics not work out.