Strongly leaning towards adopting curl's new "no embargo for LOW or MEDIUM security issues" approach for OctoPrint.

Especially after another read of https://opensourcesecurity.io/2026/10-embargo/

Considering the high risk of introducing breaking behaviour with every fix I cannot do in the open and can only get reviews on by a *very* small group of people, and the fact I've now had to close several (genAI created) duplicates, an embargo simply doesn't make a lot of sense anymore for anything below HIGH.