Yeah, I don't use my Android phones for more than a week before installing some kind of custom ROM on them.
Most users will never even think of doing updates though.
The carriers may push an update if this bug gets enough press though.
That still means people won't update, but the ones who care can be safe. Or the users who have friends who care.