But if we patch all of the vulnerabilities, who will pay for our vulnerability scanner?

The robot figured out how to bump the lock. The obvious solution is to ban the robot.