that's because they don't hav any security relevance.

Your definition of security doesn't include availability, then?

most bugs don't

DDoS-exploitable bugs generally do.