The attack rate estimation is more important than CFR — LessWrong