I suspect they provide a far more consistent attack surface for exploitation. One that likely won't change for many months in the case of some proprietary vendo

I suspect they provide a far more consistent attack surface for exploitation. One that likely won't change for many months in the case of some proprietary vendors. So no. I don't, but that doesn't make curlbash good either.