https://www.securityevaluators.com/whitepaper/sohopelessly-b...
That paper needs wider exposure, though sadly it didn’t get much traction here when I submitted it.