Today's decision is whether it's worse to have CVEs that may not be applicable, or a bug that causes child processes to die in fringe cases.