Categories. Yeah, aiming at the most specific makes sense. But I think we have too many. The nuance between bug/security/hardening is both correct, but I think too detailed.