What kind of reality check would it be when the original sudo got two even more serious security issues this year, even though it's "tried and tested"?