When vendors issue a security patch, customers are under increased pressure to either deploy the patch on their systems, or select and deploy some compensating control. Explain why this is the case.