> So far, only 2 of the 442 have been exploited in the wild, just 0.45%.

> almost none are being exploited

Isn't the whole point of glasswing to patch stuff way before it can be exploited? If the patched code is distributed quickly- there's no opportunity (or incentive) for bad actors to craft and distribute an exploit. This reads like an attempt to spin them as not being "real" vulnerabilities.