Obviously security bugs are bad and need to be fixed. But the point is that the security architecture seems to have made the right choices here. It's the same defense in depth strategy that puts reverse proxies in front of our web applications, or runs a database server behind a managed protocol such that SQL commands can never come from the front end boxes.

Or, for a glib answer: if you need to stop the car safely, engage autopilot and unbuckle your seatbelt. The car will turn the hazards on and pull over on its own.