Easier said than done

from here (image source)

Every time a vendor issues a shoddy update it undermines what would otherwise be good security advice. For all effort Google seems to put into security research, their inadequate quality control harmed it by giving people yet another reason to avoid applying updates. Vulnerabilities and threat actors may be sexy security topics, but people are still failing at the basics like applying updates. Maybe Google should focus more on helping them with those basics.