“It’s RCE, not auth bypass, and gated/unreplayable.”