It is a real question, because I didn't know about the mentioned ssh attack vector. Regarding empirical data, that would certainly be interesting, not sure if

It is a real question, because I didn't know about the mentioned ssh attack vector. Regarding empirical data, that would certainly be interesting, not sure if RCE is the only category one would look at in that case.