The company has already pulled the update, but there's a larger lesson here.