yes.
1. Code is written, or "slopped" out. 2. Vulns are found 3. ... 4. Repeat 1.
Hey, but all of us who've been complaining for years about unfixed security issues, here we go!