> or automate the process of listening for and reacting to vulns

1. This is also very hard to do correctly.

2. What automated steps would you take without any patches available to apply?

3. Potentially makes you more vulnerable to supply chain attacks