Amazing how long it took them to figure out that this is an actual risk. Now if they actually want to mitigate risks for the people on the net, they should make the software vendors out there fix the gaping security holes that their three-letter agencies are hoarding for their own gains.