Engineering managers and their managers are not all technical enough to know if RubyGems is vulnerable, but nonetheless are often technical enough to know that

Engineering managers and their managers are not all technical enough to know if RubyGems is vulnerable, but nonetheless are often technical enough to know that RubyGems is used by them. I'm not posing a hypothetical here, I've already seen management asking similar questions.