As someone with very little understanding of the security stuffs and how these recent exploits should be effectively dealt with, I'm getting the impression that the mitigations are kinda hamfisted, not looking at the 'big picture' so to speak. I wonder how far off is my vibe?
