Let's Assume SBOM's Exist ... Now What?