Interesting analysis. And that's absolutely correct, the exit probability is what makes the difference.
It could be that they were all popped boxes running the same config, or it could be basic devops making sure all boxes setup have the same config. Both seem equally plausible, IMO.