[skydhash]

> If you don't send them fast to your customer and your customer gets compromised, your reputation gets hit.

> If you send them fast, this BSOD happened.

> It's more like damn if you do, damn if you don't.

What about notifications? If someone has an update policy that disable auto-updates to a critical piece of infrastructure, you can still let him know that there's a critical update is available. Now, he can do follow his own checklist in order to ensure everything goes well.

[hello_moto]

What if they're sleeping and won't read the notification until they wake up?

Wouldn't they get compromised?

[samcat116]

most people will defer updates indefinitely if they are able to.