The policy shift can be seen as Ledger's attempt to address the impact and severity of last week's exploit.