I think the problem with security issues is there is often a ‘knee-jerk’ reaction to fixing them rather than taking the methodical approach of fixing it properly to avoid large scale problems as reported.

Whilst there are good intentions here, I think sometimes more planning needs to be made before deploying to production environments hastily.