@Viss @neurovagrant @dangoodin I think a better analogy would be Stagefright where target diversity was a major factor blocking widespread abuse IIRC: based on my recent experiments with side-channels, target HW can have significant effects.
FTR, this is an example of targeting end-user applications:
https://www.youtube.com/watch?v=ugZzQvXUTIkAnd don't forget: as SW mitigations (or even HW assisted ones) get better, attackers may turn to more "painful" alternatives...