We should not require all vulnerabilities to be remediated by patching, says Michael Chernin.