Josh and Kurt talk about how many security vulnerabilities matter enough to fix?