It is a real question, because I didn't know about the mentioned ssh attack vector.

Regarding empirical data, that would certainly be interesting, not sure if RCE is the only category one would look at in that case.