Because it’s not the same type. There was no actual info until the patch dropped, with some people in the know , which made it dangerous to leave your site up. The stopgaps were wild guesses. The multi-upload mitigation wouldn’t have worked.
There was no check that could be trusted to be the check to mitigate it. So that left the scenario that we went through.