It’s definitely making the software better. See the MSC3917 document linked by Arathorn. They have put a lot of effort into thinking about the threat models a

It’s definitely making the software better. See the MSC3917 document linked by Arathorn. They have put a lot of effort into thinking about the threat models and how to address each them. Is it perfect? Well, no. But it’s a hard problem and they are making meaningful progress.