A lot of the problems with scoring here is that just finding exploitable code is enough, the systems are designed assuming that the attacker has near to no skill which is simply not true in the real world. This is effectively one post-training step away from being as capable as US SOTA models.