@twomikecharlie But CVEs have very little to do with exploits. Also, there is a whole range of perfectly valid strategies to manage risk from vulns (see my 2nd post in the thread).
I'm all for fixing all vulns, but reality just doesn't work like that and I don't see how the problem statement (some vulns are becoming easier to discover) would affect this.