Major alerts should feel normal. I should have said that you shouldn't feel alarmed instead of suggesting that it shouldn't be treated as an event. Maybe that doesn't quite capture what I mean, but you should get the picture. You should be prepared to handle them. Unfortunately, security defects are to be expected and it shouldn't be a surprise that they might exist in your system.

>and when there is an actually major alert nobody has a sense of urgency about it.

Why? You should be urgent with all security issues. You shouldn't have people putting off security updates because they are minor.