[JoshTriplett]

That's fine, except that it is thus no longer meaningful to compare CVE count.

[hifromwork]

I like CVEs, I think Linux approach to CVEs is stupid, but also it was never meaningful to compare CVE count. But I guess it's hard to make people stop doing that, and that's the reason Linux does the thing it does out of spite.