Sure, given infinite time, they could diligently try to reproduce every bug across every version of any given product or open source library from a team at Microsoft.

However, if you have 1000s of reports a day, many of them vague with the person hoping it's close enough to a real issue to get paid, it makes sense to me personally that one needs prioritize active issues over tracking down when other issues were fixed.