This attack is not a mass “vulnerability” in the traditional sense. Rather it was specific lock designed to work on a narrow subset of systems with a specific key. The backdoor was cast as wide possible to ensure it reached that subset of systems. All to lay the groundwork for that lock to be in the right systems at the right time for the person with the key. Most of the systems it landed in were just incidental. 2/3