It's safe to assume that once we find a flaw, someone else...

It's safe to assume that once we find a flaw, someone else will probably find it. The problem here is that someone malicious might find it and exploit it before Microsoft can provide full protection.