> they catch every security issue

No they don't! They catch a lot but certainly not all of them. I can't explain why but it 100% happens.