From a customer perspective, I think there should be an option: - prioritize security: get patchs ASAP - prioritize availability: get patchs after a cooldown

From a customer perspective, I think there should be an option: - prioritize security: get patchs ASAP - prioritize availability: get patchs after a cooldown period Because ultimately, it's a tradeoff that cannot be handled by Cloudflare. It depends on your business, your threat model.