[cerved]

1. Open security vulnerabilities

sounds like a user problem

[ctxc]

A user problem that can have a very real impact on your product.

"x ProductX users impacted by Ransomware" will make headlines, your "well yes, we fixed it in v2.7.8 months back" won't.