@Gi7w0rm @GossiTheDog for a lot of vendors that would be real progress. Go read some of the old security advisories from the early 2000s where people would’ve flown Microsoft or Oracle and it would take years for them to solve these issues. Some of the timelines with respect to notification and fixes were completely bonkers like the security bugs were starting grade school by the time they got fixed.