We make the call together on if this a security issue or not. (So "everybody and nobody", and that leaves me to make the final call).
On the one hand, this does seem like something that could be an issue for existing clusters (+1 to security issue)
One the other, threadpools completely mitigate this issue (-1 to security)
One the other other, threadpools aren't on by default (+0 for security?)
We make the call together on if this a security issue or not. (So "everybody and nobody", and that leaves me to make the final call).
On the one hand, this does seem like something that could be an issue for existing clusters (+1 to security issue)
One the other, threadpools completely mitigate this issue (-1 to security)
One the other other, threadpools aren't on by default (+0 for security?)