If there was a Hippocratic oath for sysadmins and software engineers, it would say to patch exploitable vulnerabilities without needing to be told to do so.