You can usually add a pretty significant premium to an audit if it includes a public statement, like this one apparently did. But since Mozilla funded it as part of a block grant, the rate might be significantly lower.
Yeah, good call, I'm a little torn on whether to discount or raise the estimated rate based on the public report. In the end I figured it might be lower due to the possibility of further work down the pipeline.
