A few (far from all!) software vendors realistically might be able to respond and issue a patch in 24 hours. But a hardware vendor cannot. See Intel's recent debacle [1] for what happens when a silicon vendor rushes a security fix out of the door without going through a proper multi-week QA cycle.

[1] https://arstechnica.com/gadgets/2018/01/good-newsbad-news-in...