I didn't mean that to sound like I'm in favor of turning the thing on right away. (Also, the quotes I chose don't really help me make my case but I don't want

I didn't mean that to sound like I'm in favor of turning the thing on right away. (Also, the quotes I chose don't really help me make my case but I don't want to edit now since you've already commented on it. His first mail is way worse: https://lkml.org/lkml/2017/11/17/767 https://lkml.org/lkml/2017/11/17/767) Basically what I'm disagreeing with is that exploit mitigation's primary purpose is finding and fixing bugs. That's just not true. Its primary purpose is to protect users from exploitable bugs that we haven't found yet (but someone else might have).