Comment by udev4096

Maybe try asking actual security researchers. There are plenty of them in mastodon or matrix