How do you know what's a zero day fix?
(You write something)
So then you have to check every package's updates and decide if you update, yes?