And people like to shame companies
If they take longer than 90 days to fix some bugs. Whether you count it as 17 years or 4 years, that's a long time...
And zlib is everywhere. The difference between zlib and log4j in amount of code that's potentially exposed is like the population difference between India and a town so small it has only a post office and a pub.