I'd categorize this one as a lethal trifecta attack, especially as their solution is to cut off one of the legs of the trifecta (the ability to exfiltrate data to external attackers)

→ View original post on X — @simonw