@lispi314 >and the critical vulnerability it enabled only gets fixed decades later.
Please describe examples of this?

I haven't heard any cases of such happening.

The most popular cited example of heartbleed wasn't that bad of an exploit (it was a information-leak vulnerability and any decently programmed software that handles sensitive encryption keys overwrites them in memory once done) and it was discovered and fixed in less than a decade.

Most exploits only work in standard configurations as well - often you're safe in a non-standard configuration.

Generally once glowies start to utilize exploits, it's only a matter of time before they're discovered and corrected.