Unmaintained code is a security issue in of itself, so this is of course a net benefit.
This can be accurately generalized: code is a security issue in and of itself.
Now if only I could get the product team to fully understand that implication.
That’s reductionism, not generalization.
Generalizations that lose accuracy are not valid. “Ice cream is sweet, and candy is sweet, so food is sweet” is reductive.
This can be generalized: in and of itself.