I agree security depends on your threat model but CVEs counts tell you newly noted vulnerabilities and you don't really need to bother with that when the you've

I agree security depends on your threat model but CVEs counts tell you newly noted vulnerabilities and you don't really need to bother with that when the you've already got dozens that'll never be patched.