In reply to Peter.

Agree with your latter point but you can't really say that those exposed (unknowingly) that were on a 4.7 or 4.7.1 install should be considered "outdated and unmanaged"...