Then the counterargument to "the US shouldn't be hiding exploits it knows" isn't "but China does it too", it's "actually the US should be doing exactly that because it's in its best interest".
Or there's some game theory and empirically tested amount of potential for violence (even cyber kind) that one should reserve because of human's tendency to be shitty when they can.