@xogium oddly the same story goes for accessibility-related things, so this is an area in which security and accessibility can intersect in a strange way, too. Until there's mass-exploitation of this (and it's a bit limited of course with requiring Python to be in path to begin with), they may never get to it, it'll stay in Backlog for months, get punted to another team, go to their backlog, maybe a spike gets created over it, yada yada yada