That may not be the case here, and certainly isn't the assumption we can make more generally.
We regularly see regressions in platform security.