No it's not. The timings represent a good proxy for how easy it is to pull off the (weaponised) exploit in the wild. For example Flash, even when sandboxed, co

No it's not. The timings represent a good proxy for how easy it is to pull off the (weaponised) exploit in the wild. For example Flash, even when sandboxed, continues to be an extremely easy and lucrative attack vector (relatively speaking). Four seconds puts the exploit in drive-by territory. A sixty second web exploit is not so useful for "cyber" criminals. But if you can "compromise all aspects of the phone including contacts, photos, messages, and phone calls" in 60 seconds, this is probably worth it.