Comment by smallerize

Notably, those didn't need a ton of patching over time. I mean relatively speaking. We've known how to build and deploy defensible software for a long time. We might just have to stop using the projects that need constant patching to keep up, and migrate to ones that are designed better.