This is why security reports have the impact section. Every piece of software has an endless stream of bugs, but only a few of them have real effect on the users. It was pretty clear in Web3 contests. Now we see something similar on a much larger scale in all other software.