If concrete evidence does not become available resolves PROB to my opinion at close.

Currently I'd put it around 20-30%, mainly due to:

clumsy and unnecessarily public exploit implementation (plus interoperability issues) characteristic of somebody without a team able to build a professional test environment and hammer out bugs

scope well within a determined individual's reach

general lack of corporate feel seen from state actors in the past

I will not trade in this market