That ensures if your upgrading for a cve your safe because attackers wont remain in after the upgrade