True, but the larger point is that the monoculture arguably makes the impact of any given vulnerability worse. Similar to how any given CDN/cloud provider probably has much better uptime than old-school web hosts, but now roughly half the Internet can be broken by one provider having an outage.