The simplest fix is a delay between an update being pushed and the update being deployed everywhere. Several orgs are scanning all popular dependencies for supply chain attacks and they usually catch them quickly, just not quickly enough when there is no delay.

Protecting microsoft from the year of the linux desktop is the intended meaning.

But is it better than ncurses?

Inspect element, surely? See for yourself.
https://en.wikipedia.org/wiki/Roadkill#Eating_roadkill

it’s

while (true) {
    let t = Date.now();
    if (timeoutMap.has(t)) timeoutMap[t]();
}

of course. Clearly O(n).