While this may be true, this is still a major improvement, no? i.e. it seems far more likely that a rapidly evolving hot new project will be targeted vs. somet

While this may be true, this is still a major improvement, no? i.e. it seems far more likely that a rapidly evolving hot new project will be targeted vs. something more stable and explicitly security focused like bubblewrap.