This right here pretty much kills any sympathy I had for Adobe in this matter. They sit on their hands for far too long when vulns are announced, and when they do get updates out, they use a completely backwards and useless update model in the name of extracting a few pennies per user.