> the mitigations were mostly right

I would disagree. The mitigation blocked such a small portion of the exploit, i dont think its right to call it "mostly right".