I suppose if it’s being actively exploited, the next step would be to make users wait a day, like the plan to change how Android side loading works.