Alternatively, many of these exploits are dependent on extremely niche situations that are mostly handled by existing safeguards.

I’d be interested to see the actual real world severity of these - are they actually things that could be used in an exploit in any meaningful way?

RCE is substantially more severe, it’s possible there just aren’t as many, as they aren’t as applicable to highly contrived scenarios