It's my understanding that ZPM (not ZCM) pulls all content from Patchlink/Novell servers. And that Lumension (I keep calling it patchlink) actually tests the patches before releasing them to their download servers. At least they used to, not sure if they still do.

Assuming the above is correct, in ZPM, it goes directly to MS Servers to download the critical patches, so does that mean there's no additional testing anymore and that we're more or less at the mercy of MS now (compared to ZPM) if a "bad patch" is released?