5) There are noticeable differences in the types of vulnerabilities
being reported in open and closed source OS vendor advisories.
These merit further investigation because they might reflect
important differences in development, research, and disclosure