This is true, though I need to add the missing phrase - "CTF challenges typically do not involve zero days"
in real world software.
They do however strictly involve zero days in software created for the purpose of the CTF - that's basically what CTFs are about.
