Block a user
Quality: Refactor long sender functions and duplicated dry-run logic
Quality: Replace strcpy/strcat with bounded string functions
Bug: TCP client only accepts IPv4 addresses, not hostnames
Bug: --progress output is missing in multithreaded mode
Security: Scanner follows symlinks and can traverse outside source tree
Security: SUID/SGID bits preserved via metadata can escalate privileges