Pretty much. You blatantly ignore the repeated statements that the vulnerability scan is a prelude to actively attacking machines for some reason. I'm not sure

Pretty much. You blatantly ignore the repeated statements that the vulnerability scan is a prelude to actively attacking machines for some reason. I'm not sure why. I'm not saying they are attacking any machine they can. They are, however, attacking some machines. You don't develop the capability to build target lists, to attack targets, and state you do attack targets...unless y'know, you actually do. You might use it on a limited scale at specific targets but you do use it. The problem is, I don't have faith they actually engage in selective targeting.