Companies patch OS holes, but biggest priority should be apps