All the mitigations exist because they are known vulnerabilities that are well published. Of course the ai can figure out how to exploit those. It doesn't prove much of anything to start with an outdated setup. It just proves it can search the internet
-- {no channel}