What you don't do is patch in a panic every patch that is out there, people are not doing this in most instances already.

So the question here is the difference between the two, and what is it based on.

As there is always the chance, basically unfair to go that far.

Also by that measure we're never safe. Which is fine, I think we can agree there are almost always unknown exploits out there but that's not the discussion.

There is more nuance to this as well, it might work, but only in certain circumstances which seems to be where this is going at the moment.

Try telling people they are wrong often enough it happens a lot. ad hominem.

Virtue signalling is really coming more of a problem these days, specially in the security sphere.

Enough don't realise they shouldn't write to certain folders unless a framework constrains them.

What do you mean your users don't have admin access?