Comment by tremon

You are misrepresenting the premise. The premise is "if you found a bug with a COTS toolkit, others using the same toolkit may also find this bug easily". The second assumption is that many people are using the same COTS toolkit, which seems uncontested in my eyes as there's only a handful models in wide circulation.