If you don't send them fast to your customer and your customer gets compromised, your reputation gets hit.
If you send them fast, this BSOD happened.
It's more like damn if you do, damn if you don't.
> If you send them fast, this BSOD happened.
> It's more like damn if you do, damn if you don't.
What about notifications? If someone has an update policy that disable auto-updates to a critical piece of infrastructure, you can still let him know that there's a critical update is available. Now, he can do follow his own checklist in order to ensure everything goes well.
Wouldn't they get compromised?
Honestly, this reads as a suggestion that even more blame ought to be shifted to the customer.