Firewall misconfigurations, mostly. It's way harder to keep firewall up to date when you have to worry about two independent stacks.