The difference between a vulnerability and a bug is slim. This is why I don't immediately install every single software update; official code is more likely to cut me off from my livelihood than an actual exploit taking place.