Is “the security of the Internet” just a proxy for, “the number of vulns in the wild”?