Is there evidence these have been used to harm anyone? Not that I wouldn't like a world with no more blobs (or at least reproducible-build signed blobs). But I

Is there evidence these have been used to harm anyone? Not that I wouldn't like a world with no more blobs (or at least reproducible-build signed blobs). But I use a ton of software I don't have time to review. Why is solving this more important than, say, looking for RPC holes in docker?