@drgo Take another listen to it.
Segwit can only be done once because it moves signature data from one place to another, with the new place just not existing before. You can't do that twice. Segwit didn't patch any security vulnerabilities (at least directly).