Right. So the model is broken. You cannot both respond to threats in a timely manner and have Microsoft certify that the update is safe.

That leaves you either not responding quickly or responding with uncertified updates. In the past, we have examples of not responding quickly that took down large chunks of the internet (I don't remember the examples, but they were quite famous at the time). Now we have an example of a fast, uncertified update taking down a large chunk of the internet.

So, given that it can take down much of the internet no matter which we choose, now what do we do?