To your second point we’re seeing a huge comeback of vulnerabilities that we’re “mostly gone”. Things like very basic RCEs and SQLi. This is a great thing for security workers as well.