Comment by mikemotherwell

No it's exactly the sort of thought process people have.

Another scenario is someone does what you suggest after finding a real vulnerability, to waste the teams time while they exploit the real vulnerability.