BTCPay Server has no centralized master switch to disable vulnerable software, requiring the project to publicly instruct individual server owners to execute the ./btcpay-down.sh command