go and look at how the good people and claude over at rsync are fixing all their bad security bugs currently: https://github.com/RsyncProject/rsync/commit/42f7c32ce51d8e0... Also: any Linux-distro-bugtracker...

So: while running in circles might be a bit of an exaggeration, it seems (which maps to my experience) these things are much less AGI than reporting might suggest...