Yeah, I get it, back then it wasn't possible to scan the entire internet for vulnerable boxes. Now its fairly easy, patching your exposed boxes, for the big easy exploits as fast as possible is critical. Otherwise the threat actors will patch them for you so they don't show up on vuln scans, and can buy themselves time to lateral.