Rock, meet Hard Place
It seems we are being forced into a dilemma where somehow both horns get us in the arse.
We can follow traditional IT practices and test the patches while they are being exploited.
Or we can automatically install them and fix any internal systems on the backend.
Neither of these is conducive to a good night's sleep.