Privacy and security on computers was always always thoroughly neglected. It is no longer nearly as viable to continue doing so and dismissing it as only mattering in targeted attacks.
The vulnerabilities being discovered were nearly entirely already there and it's a good thing they're getting found and fixed. Many years of technical debt must be repaid. Decisions such as monolithic kernels and massive codebases written in C and C++ must be repaid. We have to somehow keep users safe through it.