Comment by rvnx

It's easier for a bad actor to get an exploit, than for an operator to test his own site if the upgrade succeded