Issues being known and weaponized exploits capable of taking advantage of said vulnerable issue being released to the public are two different things though. The reality is that these changes are required because an attack could be launched pre-mandatory upgrade.