The sector with the slowest patch cycle accumulates the most exposure. That needs no prediction about attacker capability.