He claims there are known exploits. Though I also want to know if this is really true.
Everything else looks to me like unimportant issues, that would provide someone who's already logged in as a user minor details about your server.
Which means that the paths are pretty damn uniform.
Very few consumer connections can manage, say, 100 clients downloading a massive video file simultaneously.