The meta-game required to play three-degrees-of-RCE with most developer-penned vulnerability disclosure’s threat models is staggering.