To be perfectly fair, we've come a long, long way from 20-30 years ago when most firewalls were static or at best heuristic.

Today you can integrate solutions like CrowdSec into your reverse proxy setup (which, let's be fair, most people hosting things will be using to some extent), and transparently scans all requests for known exploit fingerprints.

Basically, if you've done the bare minimum of opsec, most likely your setup will be safe from being compromised, even if you're running an exploitable version of the problem software/stack.

And that's just a free and open source solution to securing your hosting - you can further deploy DPI based IDPs, analytics that spots irregular traffic patterns, especially in commercial environments, to protect against such attacks. It's not a guarantee, but such layered security at the very least adds some deterrence.