They will make a guess, which will necessarily be incomplete, such that their secure kernel is still vulnerable to any number of issues that haven't been publicly discovered yet. Vulnerabilities are like that, they exist for years before anyone notices them.