zlacker

>So every time anyone finds a new CVE in Windows, we're going to blacklist every single Windows machine until it's patched?

Failing attestation does not mean you get blacklisted. It means that you are not as trustworthy. Not every CVE breaks an OS's security model.