An ecosystem-wide long tail alongside sector concentration. Both are true, and it complicates the corpus’s own argument.
Nobody broke the rules. The rules have no term for the gap between a vendor knowing and a controller knowing, so two compliant clocks can sum to anything.
Seventy-four independent due-diligence processes, all compliant, none of which established whether the vendor patched its own front door.
In a lawful market, removing the dominant supplier reduces volume because capacity is expensive to replace. Here the capacity is software.