Yes, this was my intent. It's not that security researchers don't publish this kind of thing... it's just that there are a million rabbit holes to explore, and probably only like 0.1% of those dead ends get written about.