And on externalizing costs - the actual humans who have to respond to bad vulnerability report spam.