Can we not expect companies to patch anymore?

Is patching unreasonable in 2024? If so how do we mitigate vulnerabilities?