Comment by mlunar

While I agree that there are lots of problems around security communication, I don't feel like the number of CVEs fixed is a good proxy for bad security, I would assume it's more the opposite. Like the more incident reports an airline company has, the safer it tends to be - the unsafe ones don't care to file them.