Valid, but...

1. I would like this better if it were not in LLM-speak.

2. You do not owe your employer more than your 40 hours per week (average). If you're overworked, that's a decision on your employer's part. Do what you can, advocate for appropriate investment in compensating controls, burn-down of tech debt, prioritize the issues... but don't hurt yourself.

I hear you. This pretty daunting: https://cve.0xosprey.com/

As much as I'm for releasing everything people learned and patching all-the-things soon, I would really like it if nobody was an asshole around Christmas. You can wait until next year - just let people rest - there's no point doing disclosures then from the non-malicious side.

I believe at the current rate, it should be considered to look to different ways to audit your software instead of CVEs. It was already unmanageable before AI, now it is impossible to triage.

Yes.

There will be at least ONE critical CVE every week.

> This page ships no JavaScript

Would be more convincing if the page didn't have JavaScript.

I feel that LLM-assisted writing really undercuts the point of what is ostensibly a cri du coeur...

This message brought to you by the NSA. Please do not patch your systems.

It's ok, the more companies have airgap systems the better.