They specifically describe that exploits are usually multiple small vulnerabilities chained together. With that understanding, it sounds like closing vulnerabilities isn't the same as discovering an exploit. Instead, you're leaving fewer small gaps behind, to make it harder & harder to put together a working exploit.