You: “Was it patched? No”

Also you: “but that cost literally _nothing_ to the company.”

Risk is an expense.