In case you missed it (and only saw the outrage), Tridge (https://en.wikipedia.org/wiki/Andrew_Tridgell) recently blogged about #rsync and the change in security vulnerability discoveries:
https://medium.com/@tridge60/rsync-and-outrage-d9849599e5a0