Since nobody has disputed Sean's assertions in the nearly half a year since his comment #8 above, I'm going to assume the VMT no longer needs to track this and is unlikely to issue any security advisory about it, so am marking our advisory task Won't Fix.
Since nobody has disputed Sean's assertions in the nearly half a year since his comment #8 above, I'm going to assume the VMT no longer needs to track this and is unlikely to issue any security advisory about it, so am marking our advisory task Won't Fix.