Many vulnerabities seem to be in code paths for rarely used features. They can often be disabled.