Hacker News Reader

That's what cooldowns are for

That's great until you have a public zero-day exploit.

If it's big enough like this one you can always make an exception.

Cooldowns don't apply when you're patching a CVE; like, dependabot vulnerability scanning in GitHub has a separate cooldown from auto-updates