Comment by tranceylc

I would assume it’s actually so they can allow it to spread before it gets activated. Then do something that affects the entire chain of package dependencies