It is however google's way of security: "to help prioritize and allocate resources for the most essential security assessments and improvements". Fix one bug, introduce 3.