"The problem, though, is how do you KNOW the bug isn't already known elsewhere?"
As you like posing hypotheticals here's one for you: There's a bug in the OS that runs your intensive care monitoring system which could lead to it being pwned. Shall we shut it down, just to be safe?