Aside from security updates being delivered between late and never if they are ever compromised 1/3 of users will be effected in the first hour and 100% effecte

Aside from security updates being delivered between late and never if they are ever compromised 1/3 of users will be effected in the first hour and 100% effected within 24 hours even if on the 25th hour they discover it and take it down. In the old school situation distributions would still be between days to weeks deciding to pull in a new version released through normal channels.