@mumblegrepper That's absolutely true, but I usually try to model environment for a specific technique that I commonly use, and even with complete control I struggle to get the system to a vulnerable state, while in the real world everything seems vulnerable by default.