Comment by akmiller

1 assumes that some "private entity" gets to decide what is crucial infrastructure and what is not, what gets the opportunity to be patched and what doesn't.

I'm not ok with that and don't know why anyone would be.