niplav comments on Patching ~All Security-Relevant Open-Source Software?

[niplav]

Not draft amnesty but I’ll take it. Yell at me below to get my justification for the variable-values in the Fermi estimate.