[sp8962]

That was an issue because of the validation pipeline Mapbox was using at the time, the vandalism had long been fixed in OpenStreetMap proper when the story hit the news.

So, yes, you are going to need to make a trade off between potentially more incidents, but faster repair, and less incidents, but being stuck with your current validated release for a while if something goes wrong.

PS: it is OpenStreetMap, no plural "s"

PPS: Meta produces a publicly available validated version of OSM data.