Precisely, their hand was forced, by this Security: Regarding CVE-2020-5741
If there is a CVE, you gotta act on it.