The attacker didn't create the vulnerability, but they had the means to identify it and then apply it. What else did they discover? That is the strategic concern. They have tremendous resources to identify and exploit things, then other bad actors may be able to use it for their advantage. We have seen this before, but the rate and sophistication are skyrocketing.