Mythos finds exploits largely by reading source code.

Your open source dependencies may need to be version bumped quickly, but most companies are not going to be immediately exploitable without a large scale source code leak, and an attacker motivated to spend large amounts of money/compute on finding lucrative exploits (not just any exploits).

To me the reaction has been way overblown, though again, very real for large scale open source projects.

And going forward there's not going to be as many issues due to using models defensively, e.g. this vulnerability spike is likely a one time event.

So the fear porn is a bit much.