That's just proof it's popular.

Or, you know, you spent five minutes to apply the free, open source patch when it was released in mid-October and your sites were protected.

Or are you arguing that any software that has ever required a patch is horribly insecure?