If only both of you guys knew that Valve has been working on CS2 for the past three years and no, it's not "10 people" it a lot lot more.

I agree it took them too long to fix these vulnerabilities but Valve is notorious for its schedules/timeline/insane delays. It's been a meme for years now.