Finding vulnerabilities and thus fixing them is a good thing. At least with Linux we know what is happening.