Do we need Windows patch legislation?