CP064 has a fix for the exploit that has minimal negative impact and is a clear win for the protocol. CP063 is a less elegant fix that will temporarily break integrations. This was not an easy decision, and we'll provide more information on our reasoning once the change is queued and executed (or cancelled). We cannot comment with any further detail as this is an ongoing exploit.