> The "don't apply the updates" argument in security is basically philosophically comparable to the antivax movement As long as you also apply the quarantine p

> The "don't apply the updates" argument in security is basically philosophically comparable to the antivax movement As long as you also apply the quarantine principle when relevant. And herd immunity, both applied backwards: Quarantine for when you run code that's under your control, like an HPC cluster; the biggest dangers from these vulnerabilities are when you're running completely random code supplied by others, JavaScript in browsers for normal users, and the multi-tenant systems of cloud providers. Herd size matters because the bigger the herd, the larger the number of potentially vulnerable systems. IBM mainframe chips are vulnerable to Meltdown and Spectre, but there aren't hardly as many of them as x86 systems. Although the payoff of compromising them is likely to be disproportionately high.