One of the elements to all of this, of course, orgs like Microsoft - at the top of the vendor train and trying to profit from AI - have created themselves an almost unmanagable amount of work as the vulnerabilities found end up in their own product.
Which sucks, but it's like 0.01% of companies, and those companies are largely the folks who created and marketed the thing they're now being drowned by.