That's kind of proving my point, isn't it? They reacted to the vulnerability (decades ago) by not deploying it, and presumably learning some lessons.