The scary version isn’t open source shipping patches.
It’s proprietary software where you have no idea who’s finding the bugs, who’s fixing them, or whether anyone is looking at all. 👻
A patch is proof someone’s paying attention!
I don’t understand these takes. It doesn’t make sense that the largest open source CMS is making security patches? In a world with managed hosting and agents soon (already!) doing the work for us?
Would you rather no patches?!