Raising some good points! I think the issue of "attribution" is important in that forensic investigators will be able to reexamine past intrusions while comparing them with the vault 7 release. I wrote a post about it today https://steemit.com/wikileaks/@digicrypt/vault-7-digital-forensics