Thanks for pointing this out. It certainly is interesting but falls outside the current scope of our software vulnerability management solutions. SVM is focused exclusively (and this focus is a chief benefit) on the detection, prioritization, and remediation of installed vulnerable software versions.
That said, we are always open to new possibilities. I'm curious how you see us supporting, integrating, or providing an alternative to Microsoft Defender for SQL. Please elaborate.