At scale, a credible worst case is an automated campaign compromising unpatched sites, leading to data theft, fraud and ...