> This is also what I would expect, and it makes sense to not allow installations to get away with stalling the rollout of security fixes that affect downstream

> This is also what I would expect, and it makes sense to not allow installations to get away with stalling the rollout of security fixes that affect downstreams We shall also extend this to Microsoft employees: Got an pld car or electrical screwdriver ? You shall update it every two years because it is "out of support" and "insecure".