Given that phone OSes are guest VMs on an unreachable host and managed from a centralized authority with push-permissions, this shouldnt be surprising. Is this

Given that phone OSes are guest VMs on an unreachable host and managed from a centralized authority with push-permissions, this shouldnt be surprising. Is this news because of how easy it was accidentally rolled to production and applied to more people?