Noa Keller examines the NCSC's warning about an impending 'patch wave' and the realities of technical debt in cybersecurity.