I wouldn't call it devastating just by dint of the issue count: - Most issues do not become exploitable vulnerabilities. - The prereq for these code paths

I wouldn't call it devastating just by dint of the issue count: - Most issues do not become exploitable vulnerabilities. - The prereq for these code paths is root in the jail, so an ordinary user would first require a privilege escalation bug to get root, which is where most security review is traditionally focused (these paths should be closed already). I haven't seen whether the POCs can actually get to an escape, but this is great work and FreeBSD is better for it.