Thanks for pointing this out, I hadn't noticed that. I'd expect a large customer to be persuaded by Danfoss to upgrade within a year, especially before publishing the details of the vulnerability, so you're probably right.