https://security.googleblog.com/2023/06/learnings-from-kctf-... - Has some interesting information on that topic.