It stymies attempts to track mobile devices over multi-day periods using their IMSIs.
Trackability is definitely a vulnerability.
Right but it’s not a baseband vulnerability