When I saw CISA add a Linux kernel vulnerability from 2023 to the Known Exploited Vulnerabilities (KEV) catalog in mid-2025, one thought came to mind: the striking asymmetry in how we think about cybersecurity.