CVE volume is climbing faster than any patch cycle can keep up with. Exploited flaws need to go out fast, while least privilege limits what the rest can do.