Hardening, Baselines, and Patching Evidence