increasing relative to the number of vulnerabilities (unknown),
and how many different bug types are found by the average
researcher (probably fairly small). If such data is available,
then a further breakdown could be performed based on