> This "era of constant exploits/patches" is not normal and can't go on. Currently it is an ongoing cat and mouse game, but it doesn't have to be.

Security is always reactive by its very nature. You can do proactive things, but you will always be reactive to novel attacks.

Expect everything to have various levels of rolling upgrades, and soon. That's a lot of work.