I seem to remember Matherly saying that he charged larger institutions who need lots of data for legit research. He also (as of a year and a half ago) said that he was basically breaking even.

I guess a university security researcher is looking for monetary gain in the form of grants, though.