“If in the future you are able to reproduce this issue using a different device that’s running iOS 17 or later, please let us know.”
That was Apple’s whole answer to a bug that lets any website silently read system files on an iPhone 6S. Chromium patched CVE-2023-4357 in June, and iOS 15.8 still carries it while Apple calls the 6S supported. A Bluetooth exploit is also fixed only in iOS 17. Supported means Apple still ships updates, not that the holes get closed.