Not to mention that notepad had a 7.8 CVE (an RCE) earlier this year -- https://www.cve.org/CVERecord?id=CVE-2026-20841