It apparently wasn't mandatory - you could ignore patching it if you kept doing the "reboot at least once every 22 days" directive from the AD 2016...