This is an extremely impressive write-up.

When writing security blog posts, there's always a constant battle of essentially "how much background/prerequisite knowledge do I assume," and getting the balance right to make it accessible but also feasible to write can be very challenging. Identifying your target market up front, and then delivering to that market with plenty of background info, is no easy feat! Well done!

I'm bookmarking this to give to aspiring researchers, of whom I meet a few every year who are looking for guidance like this.