You warned us about thousands of critical vulnerabilities.

A prioritized list is still a list of open vulnerabilities.

The work that actually reduces exposure starts after the list, when someone in IT has to change a production system.

In any product evaluation, security teams can test whether a tool helps them fix vulnerabilities or only find them.

"We warned you" leaves the vulnerability where it was.