I do see that, but there were exploit paths that didn't require doing anything you would block with a firewall or need specific access rights for. Like if I se

I do see that, but there were exploit paths that didn't require doing anything you would block with a firewall or need specific access rights for. Like if I set my user-agent to contain such a macro and connect to your public webserver. If you had webserver logging and log4j configured a certain way, then I'm running arbitrary code. Maybe I can't see the output right away, but it's running.