@todb much of the recent abuse of the CVE system lately does appear to have had profit as a motive, so there is reason to think it can be improved. we do enthusiastically support the comparison you're doing, too, we just want to make note of its limitations.