Might be better if they publish something more like a CERT bulletin to warn power users and enterprise of observed/noticed threats. - Finally, I really do not like outsourcing "all security" to Apple, and I really don't like Apple being the "central authority" over our machines, having the power to revoke certs "by mistake". The only "security incident" I've had in the past 10 years on a Mac, that's wiped out a day of work originated from Apple itself when they "automatically cancelled" Charlie Monroe. That's too much power, that is open to "mistakes" "negligence" or even an insider threat from within Apple itself. Apple was doing better when they left macOS alone and let vendors who know better do better. I've had more grief from Apple in the last 2-3 years than in the entire time I've owned Macs going back to pre-OSX days, and I went thru the 68K to PPC era and the PPC to Intel era. I call this era "Windows, but with more grief."