> It implies arbitrary []native[] code execution.

This is simply not true in a plurality of cases (eg, it implies that applications running under qemu are incapable of having RCE vulnerabilities) and frankly sounds like a distinction that was made up to avoid admitting that script tags are RCE bugs in web browsers.

It's interesting how much this little subthread recapitulates the experience of responding to the median bug bounty submission.

Well, modulo "responding to a submission" versus "reporting a vulnerabity", we can certainly agree on that at least.