> they are ... finding ... vulnerabilities ... that have not been worth the time and effort ...

that's kinda the entire point