On: Less is safer: Reducing the risk of supply chain attacks

[mikeocool]

> We don’t rush upgrades.

Can’t wait for “implements mechanism to delay application of new patches” to start showing up compliance checklists. My procrastination will finally pay off!