That's the obvious general solution for everyone - having critical security vulnerabilities on their own channel, without being required to take the features/antifeatures too.