Yeah, the staggering amount of CVEs in qmail and postfix can never be remedied. What a clown. Has he ever programmed seriously?

Notably, those didn't need a ton of patching over time. I mean relatively speaking. We've known how to build and deploy defensible software for a long time. We might just have to stop using the projects that need constant patching to keep up, and migrate to ones that are designed better.