A tricky, but normal, part of the transition from pre-launch to post-launch is changing from an attitude of "every bug is super important because if it happened in the lab, it'll probably happen to thousands of customers" to an attitude of "there will definitely be too many bugs to fix them all, so we have to pick our battles carefully and not get overwhelmed."
I've been stuck in the former mode. I guess it's time to start shifting a bit.
On the other hand, that's not an excuse for not fixing bugs.
ssh+2FA to all your machines, anywhere, without opening firewall ports.