CVE submitters as your marketing demographic

Sorry; this is opening up an old worm can[*]

But it's sad to read all the tell of concern about CVE reporters popping up, whack-a-mole style.

I guess it is, in a sense, effectively "putting security first," by some measure[**] of security.

(I.e., a measure that gives you a zero when the perfect and the good can't be 100% allied.)

Also sorry if I'm ranting at the choir.

Thanks to our fearless editor, as always, for capturing the drift, the spirit, the highs, and the lows of the debate, even if it ends up sticking in some of our craws.

--buck

[*] https://lwn.net/Articles/944209/

[**] i.e.., one resulting from Goodhart's Law, as mentioned in https://lwn.net/Articles/961978/