it's literally discovering patchable security holes that malicious users could use.

that's useful