It does not mean SQL injection is rare. It means the disclosure regime records who was affected and not how.
A hurricane-style category applied to a cyber event. Severity is a property of the victim and its coupling, not of the attack.
An ideological name requires no capability and no conviction. It buys coverage, and it redirects attention toward a motive that may not exist.
How a file opens, how it closes, and why we never grade on ransom size.
When we grant anonymity, what we promise, and what we never withhold.