AUR is kinda the wild west. But also, in today’s cybersecurity climate, you really shouldn’t expect zero vulnerabilities. You should, however, expect prompt reporting of incidents. If you believe that no news is good news, then you’re burying your head in the sand.