Do you deny the reported bug finding capabilities, or do you deny that they are dangerous?