in my opinion the updated (ucode-intel and ucode-amd) should be blocked because it'll crash a lot of systems and users will turn away.