Thanks, I wrote that statement. I think it might be worth it if the statement text makes its way across to the CVE pages.