> Remotely exploitable bug causing grammar check api to fail to perform grammar checks? Doesn’t sound too exciting.

famous last words. finding security relevant bugs is often a game of identifying what the original developers might have found to be not "too exciting" or places they were out of their depth and then focusing intense effort on finding their mistakes.