That's the result of all this silly offensive cyber and hackback and the government buying 0day nonsense. Imagine how the software landscape would look like if the security services would have directed all these resources into securing the software in use.