This is a good point, but the issue is that vendors have abused this need by not just pushing security updates, but also regular rewrites that make the products more invasive/full of language model shit - Exhibit A being anything at all from Microsoft