That's the point I was trying to make; if someone accidentally pushed a broken update, that sucks, but its not the first or the last time it will happen, and at least there's a clear path to it getting fixed and someone being paid to do it. The cert being expired and the only company who would have been in charge of fixing that not really caring anymore sounds to me worse from pretty much any possible point of view, and selling a product that will stop working if you decide to stop servicing it seems pretty terrible.