In the React2Shell saga, nonworking and trivial proof-of-concept exploits led to a false sense of security. Can the onslaught ...