Im speculating based on the Mirai story. Botnet like that doesnt just use one vulnerability. Later Mirai variants pack over 100 attack vectors gathered/traded on malware forums, almost none are ever 0days.