The root-cause fix will take weeks; protection can’t wait