Whatever the reason for CrowdStrike's failure, a lazy attitude toward allowing vendors to push updates at any time in the name of a dubious "best practice" for

Whatever the reason for CrowdStrike's failure, a lazy attitude toward allowing vendors to push updates at any time in the name of a dubious "best practice" for security reasons let the bug have massively wider reach than it should have. Sysadmins should have instead thought more critically about the value disallowing such updates and pinning dependency versions to ensure they can predictably know what's running on the machines they manage, and subscribing to alerts about security holes they need to update and making informed decisions like seeing how the new updates are actually working in the wild instead of handing over the keys blindly. Want to call that "perfectionism"? Be my guest.