Introducing changes to the semantics of query operators in minor releases sounds like a great way to introduce security issues. How many CVEs over the years ar

Introducing changes to the semantics of query operators in minor releases sounds like a great way to introduce security issues. How many CVEs over the years are because of someone screwing up their operator precedence in permissions checks?