You don't "think infosec". If I'm an attacker and I notice both amazon and azure rebooting all their systems I know something is up. When I see that both Microsoft and Redhat employees are working overtime it gives away more information. All I have to do is crack on of their patched systems and I can bin diff it and figure out what is up.
Then I sell it off to blackhats before the rest of the world is aware.
Then I sell it off to blackhats before the rest of the world is aware.