

Pretty good article; a nice overview of recent developments.
I also agree with their conclusion; avoid American commercial entities whenever possible. The culture of corruption and criminality is simply too deeply rooted among the executive class and it is highly unlikely that there will be any true anti-corruption reform in the next ~20 years (I hope I am wrong).
I am assuming the fix for the second vulnerability will be backported to the older version in bookworn; 13p1 if I remember correctly.
I’ve seen theme backport security to older releases of much less important software.