Comment by tptacek

I don't think the rule would be better with more detailed vulnerability scanning requirements! All these things inexorably become races to the bottom.