especially since they’re mostly coming about as a rule change that says any attempts to patch will get a cve of it’s own in addition to the one that they were responding to.