The representative declined to say why company admins didn’t patch sooner.

In the corporate world, staying quiet and doing nothing is often safer for your ass than doing something that could cause downtime (such as emergency patching).