It means they are unable to fully mitigate threats but carry such a threat until use the proper sofrware to clean up the mess.
It means they are unable to fully mitigate a threat but could contain such a threat until the proper software is used to clean up the mess.