Someone I don't really want to have an argument with asked me "if not forced updates, what do you do about vulns?"
And maybe there isn't a good answer.
That doesn't mean the unethical one being pushed now is okay.
I'm almost to the point of saying the answer is "if you ship vulnerable software, it's vulnerable forever except to the people who voluntarily fix that, and you live with the market consequences of nobody wanting to use your shit".
And the next player figures out a way to make it so that attack surface is minimal and fallout of non-catastrophic, because they know if they don't, they'll be the next ones facing ruin.
@dalias Maybe the attackers who exploit the vulnerabilities will patch them to avoid being dislodged from their beachhead.
Ultimately, though, people need to be responsible for the software they run on their own computers. The alternative is that those computers aren't really theirs, and that's nightmare fuel.
