This tweet is a nonsequitor. The way everything is getting hacked is not unpatched vulns. It’s overwhelmingly things like phishing or taking advantage of misconfigured servers.
The common trope in infosec is that insecurity is due to a simple moral failing, like laziness or greed. If only people weren’t lazy and did the one simple thing of patching their stuff, so many problems would go away.
But in fact, patching isn’t so simple. If it were problem-free, all patches would just be automatically applied. Patching causes as many problems as the security threats they are supposed to guard against.
