Funny you should say that, given they definitely have exploit code in `vcpkg`