Am I missing something in thinking that a reasonable solution is to temporarily block downloads of potentially malicious packages? Why remove them? EDIT: or be

Am I missing something in thinking that a reasonable solution is to temporarily block downloads of potentially malicious packages? Why remove them? EDIT: or better yet, don’t allow people to download the update, just keep users on the old, ostensibly safe version until everything gets sorted?