When it comes to third-party vulnerability patches, most security experts still believe patience truly is a virtue.