Is Patching Dead? Vulnerability Management in the Post-Mythos Era