> I'm not sure if not doing RL capability gain on offensive cybersecurity can be really called "nerfing"?

I concede that term can carry overly broad connotations.