> Change happens.

The low level tool that has served to rescue more systems than I can count does not need to "change" simply because "it happens, bro."

> while we can mechanistically

You can rule it out with process as well. As in "don't change what isn't broken."

> If they can introduce an RCE to Notepad

Then they clearly feel they have no viable competition. This is table stakes. Getting it wrong should lose you most of your customer base overnight. Companies actually used to _work_ this way.