If they waited until there was a credible threat to SHA-2, then that's waiting too long
This is why they have announced an open competition to replace SHA-2 with SHA-3 after 2012...
I have a very simple question. If they don't want to wait anymore, what are you waiting for?