@GossiTheDog in my experience, I've noticed in meetings that if you downplay it too much, nobody ever takes any security issues seriously. Even the serious ones. I think there is value in not downplaying anything because humans always take the easy option and thousands of machines will remain unpatched for months on end.