you realize modern browsers have millions of lines and over a decade (or two!) of legacy code running that are under constant scrutiny by actors who spend all their time finding exploits in binary executables, right?
you realize your operating system also ships system updates on a regular, often daily basis, right?
would you rather they leave security holes open exposing your computer to bad things?
You know there’s another option besides not passing security holes to the users and then patching them later right?
you realize modern browsers have millions of lines and over a decade (or two!) of legacy code running that are under constant scrutiny by actors who spend all their time finding exploits in binary executables, right?
you realize your operating system also ships system updates on a regular, often daily basis, right?
How is any of that the user’s problem
This is a common excuse for a lot of box checking nonsense and we both know it.