How should a production incident's postmortem differ from simply fixing the immediate bug?

A good postmortem identifies not just the proximate technical cause but the contributing factors that let it reach production undetected or unmitigated (missing alerting, an untested assumption, a process gap) and produces concrete follow-up actions — fixing only the immediate bug without addressing those factors leaves the system equally exposed to the next, different incident with a similar root contributing cause.