Yeah, so true.

Just had to retire a server a couple weeks ago, because of a new vulnerability discovered in its IPMI firmware.

It's a bummer, because if your support contract runs out, sometimes you have to pay to upgrade, which leaves you in a bind. In my case it made more sense to just replace this one server.

But, ultimately I guess my point is that even if IPMI is patchable, there is another hurdle, you can't as easily maintain it yourself as you can a linux host.