Don't underestimate how long it takes to deploy a fix to such a vulnerability. Any change in consensus (which this would be) is a hard fork, and deploying it without carefully coordinating months in advance is certain to cause chaos.