The CVE industrial complex is real. The majority of CVE I’ve looked into are not really risks. It’s a sea of noise with the occasional super important exception. Good an on this dev.