That's a good point, although the only recent exploit (in 2017) depended on a combination of 3 vulnerabilities that had already been fixed over a year and a half ago when the exploit was released.