There are two unstated assumptions here: 1) She had the organizational power to order patching and rollout (which is more than the power to prevent a rollout).

There are two unstated assumptions here: 1) She had the organizational power to order patching and rollout (which is more than the power to prevent a rollout). 2) She didn't try. You may be right. But.