I was just recently considering whether we should move our postgresql over to Heroku. On one hand, it sounds promising that they deal with important security u

I was just recently considering whether we should move our postgresql over to Heroku. On one hand, it sounds promising that they deal with important security updates, and can do it even before the fix is officially announced. Very impressive. On the other hand, not being able to schedule the downtime to fit with your app/userbase is quite annoying. I understand this could be a potentially big security vulnerability that needs urgent fixing. But each organization is different and their risks are therefore different. Some people might prefer to take the risk of a few hours delay to apply the fix (being exposed) in exchange for not having to experience unscheduled downtime of this nature... It seems a little awkward to me that Heroku is taking this decision for its entire customer-base in such a way.