As zero-days and AI-generated exploits emerge faster than patches can be deployed, the decisive control lies in network segmentation rather than the patch race.