> People in this thread are worried that they are significantly vulnerable if they don't update right away

Most of them assume what if they are working on some public accessible website then 99% of the people and orgs in the world are running nothing but some public accessible website.