We use responsible disclosure in Linux more often than not.
By the time you hear about the vulnerability, it has already been fixed in the current release. So, as you have the most recent version, you're as secure as you're going to be.
It's why we keep updating. Linux (and the associated applications) are not without their vulnerabilities.
The good thing about vulnerabilities in Linux is that they're hard to weaponize. Generally speaking, they don't go from machine t machine like a virus.