>Sorry, but "running but not vulnerable" is not nearly good enough nowadays.
What does that mean practically? What you said applies to every networked device and tech. All routers, all computers, all OSs, all voip phones, etc, etc are 'one vulnerability away'. from total compromise.
Mitigation does not necessarily mean to entirely protect. Having less of a homogeneous ecosystem mitigates the risk of any one vulnerability, as it's unlikely to affect as many systems. It's not a solution, but it may help.
What does that mean practically? What you said applies to every networked device and tech. All routers, all computers, all OSs, all voip phones, etc, etc are 'one vulnerability away'. from total compromise.