> I have not seen an exploit in the wild...but the risk is blown way out of proportion
That's a very naive view on it (now) and I'll try my best to explain why.
The bad actors can discover multiple 0-days on the fly to gain access to an employer/company infrastructure with valuable data/information, or in the case of Binance, crypto. They could chain multiple such attacks going from one-company/provider to another, to another, to eventually reach their target.
To anyone interested, this is good reading material on the topic:
(1) study the Binance hack in detail
(2) OpenAI huggingface hack - focus on 0-day chaining