>>106207934
because a lot of them are legitimately not triaged, let alone patched.
They're being honest about that, at least. Again, that means you can be proactive around protection and countermeasures.
Pretty well any commercial offering would simply hide the fact that they knew for "corporate optics and liability reasons", so you end up a sitting on 0days you don't know about.
If you're pragmatic, it all goes back to having to do BeyondCorp style shit.