[ParetoOptimal]

I agree, however source engine does have a history of some RCEs. The first one that was phished could have been used to phish the other as well.