for example: "zomg ai found cvss 10!!!!"

meh.

"and now all kinds of embedded devices are going to be vulnerable and need updating"

ok now you have my attention

"because the wolfssl people did a really basic fuckup back in '17 and nobody audited the code for this functionality since"

ok so now we have an -actual problem- to discuss around corporations exploiting open-source projects and failing to provide appropriate support for the personnel who develop and maintain the library.