It took 8 hours for CloudWays (DigitalOcean) to apply the patch. Big companies suck at responding to major stuff like this.
When I’ve worked at small places, a security patch is bumping some versions and restating some servers.
I worked at a massive Rails shop for a decade and a big security bump meant mobilizing a team, coordinating updating dozens or hundreds of apps, all while maintaining platform stability and staying within SLAs. It’s a nightmare.