one is more secure than another in a very specific edge case that involves zero-days that would not be wasted on an nsec, I guess