[mimsee]

> brick all WP installations using ACF on a WP Engine host

That tactic would work, if WP Engine had access to the update server hosted at wordpress.org.