A fair position to take, but not really relevant here. Removing that attack vector from your own offerings doesn't un-compromise anyone else.