But the maintenance workload really has increased here. These machines are producing a torrent of exploits, some fraction of which are real and serious. Certainly eyes-on every one of them, but if they are short, obvious, correct, and exactly what you'd have done anyway? 🤷 What do you want me as a maintainer to do? Change the variable names? Leave the exploit? Or automate the copy-and-paste, so I don't even check it? I am not in favor of that last one, but I can't defend the idea that programmers should leave their users vulnerable because it was a machine that found the bug.