I think 4 of the vulnerabilities, about skills, signature, identity are not willing to be treated by A2A voluntarily.

Because it need to be handled by the agent's owner themselves or a third party. Difficult to a protocol to guaranty that.