What would you use then? I don't think a manufacturer should be judged too harshly based on if they have vulnerabilities or not, since all software does, but r

What would you use then? I don't think a manufacturer should be judged too harshly based on if they have vulnerabilities or not, since all software does, but rather on how they respond to and patch those vulnerabilities.