Bad agents already have dozens of zero-days they can use.