Yes that would be my view. Open access doesn't make it trivial, but remains the most expedient way to remediate these exploits.