[Smaug123]

Only if everyone runs it. The attacker just needs to find one vulnerable system; the defender must protect them all. Obviously given that the tool exists, the defender must run it, but it's not at all clear to me that the existence of the tool different all favours defence.

[OutOfHere]

The Chinese almost certainly have similar tools and they won't wait. Waiting too long is foolish for this very reason.