Exactly.

When there's a high profile bug in an important FOSS project, everyone and their dog is looking for a fix. Usually it'll be patched within days, if not hours, of being reported.

When there's a high profile bug in a closed size source project, the company backing it will deflect and delay until they're forced to fix it, and they can sometimes get away with it for years or even decades.

All software has bugs, which remain strategy do you prefer?