> When you have software that's critical infrastructure, with a nutso security policy like "no embargoes / 0day me bruh",

...you then should stop and re-evaluate your life choices: specifically, choosing this particular piece of software, which is known to have always been insecure, to be a critical part of your infrastructure.