Presumably they only need to guess the flags you used then. There is really not all that much entropy there. And I suspect doing so is fairly uncommon in prod

Presumably they only need to guess the flags you used then. There is really not all that much entropy there. And I suspect doing so is fairly uncommon in production environments anyway.