That only works if your application is simple enough for the infosec folks to know how to write a patch for it.<p>If the organization has 200 of those apps, it&#x27;s unlikely a transversal security team is able to write patches for each one of them.