My expectation is that something like this doesn’t happen in the first place.

Given that it has happened, I expect them to provision a new certificate and push a fixed version within an hour or two to all release channels.

What I would emphatically ‘not’ expect, is a hack that might take up to 6 hours to be applied.