[hombre_fatal]

> would likely be quickly noticed and fixed

Fixed as in fixing the exploit that TFA is reporting? Isn’t that the point of their report?

[hyperpape]

Perhaps, but it could also be fixed/mitigated by cycling the cache state and blocking bots. It might also be something that can be blocked in a web proxy.

It's interesting, but I share the thought that the impact is overstated.