localhorse

The biggest different is that (to some extent) this vulnerability requires no user intervention (at least not in an active capacity), whereas the app permissions issue is one where the user has actively chosen to accept something.

> But, there is an element of random chance that exists outside our control and always will.

Certainly. But - statistically speaking - this would affect everyone the same way, positively or negatively. You're talking about chance, not luck as a property or attribute that someone can have more of than someone else. It might seem that way, depending on your sample size, but that's not really how it works.

I'm not sure that's true.

Do they need to tip their hats, even when dealing with "high value" targets? Once you've found what you're looking for, you could easily find other damning information that could have plausibly come from somewhere else, no?