Do you think this is fair?"Problems that only trigger using legacy dependencies are not considered security problems."https://github.com/curl/curl/pull/16086#curl