When a defect has a high likelihood of being exploited, or may compromise the data integrity of the system (and the company), any suitable candidate will want to prioritize those. Those defects that are cosmetic should be given a lower priority unless they interfere with the user experience in a substantial way.