Okay, I may've been wrong about exactly when the auditing started, but do we agree that the number of security vulnerability announcements in the past year is s

Okay, I may've been wrong about exactly when the auditing started, but do we agree that the number of security vulnerability announcements in the past year is somewhat predictive of the number of announcements coming in the next? For me the main worry is attacks from people who aren't doing their own research but just exploiting the window between the public announcement and when I get the patches installed, and I really wish there were fewer such windows.