The fact that this is the markdown image exfiltration vector - one of the few examples of LLM system vulnerabilities that has a relatively simple and robust fix - makes the fact that Cline failed to act on it in 90 days particularly concerning.