What matters is not necessarily the number of weaknesses in a system, but which of those weaknesses can be exploited before they are fixed. This requires a departure from traditional cybersecurity approaches.
Regulation and oversight are of little use if they are always playing a chasing game. AI companies have turned regulation into the last line of redress when it should have been the first line of defence.