I think it's not so much “buying" it, as understanding the larger point that’s being made about the class of technology in order to make much more critical points. Quibbling over the later stages of exploit execution instead of focusing on all the classes of vulnerabilities that lead to exploits don’t necessarily make us more secure either, as is sometimes claimed