That means that my 10k company users will have systems vulnerable for between 0 and 4 hour longer than necessary. That is less than optimal. Really, why do thy even give a 4 hour window for when it will be released?