One that I have to copy-paste over and over are vulnerabilities in the CUPS printer driver chain that don't apply because we don't print arbitrary things, we only print things that we create. Yeah, there's a vulnerability here in image-magick if you throw it such and such maliciously crafted... well, we only allow it to process our internally generated reports and there's no pathway for maliciously crafted input to reach it, so...