I think a lot of these problems could be nipped in the bud by more aggressive code auditing and patch management. It's better to start with fewer zero-day vulnerabilities. Once the zero-day exploits are out there, you have to act to mitigate them. Another way to think about it is to compare it to home construction.

You have to use good building materials to start. After the house is built, you get into the decision cycle of maintaining, repairing or replacing the home.