This, and also the fact that Citrix's mitigation was not perfect. NCSC's recommendation was to shut the service waiting for a real patch: https://www.ncsc.nl/actueel/nieuws/2020/januari/16/door-citr...