The two links are the same same bug. Hardly "full of security holes"
I would characterize them as "links." As opposed to a discussion of security holes.
I think I would argue that linking to the security problem(s) and then writing about their style and how they probably came to be counts as discussion, but to each their own.
I didn't know security holes had a "style." I suppose their style is "literal Nazi" judging by this thread.
The blog mentions AI and untrusted input sanitisation. Hope your day gets better.