That's exactly the thing. They call themselves PoCs, but most of the time the exploit chain that they "prove" relies on some extremely unrealistic condition, like the intruder already having elevated privileges. Or it's just completely made up and the PoC only "works" because the AI changed the source code. It's incredibly unreliable.