You can also argue that it is impossible to update dynamic libraries because they are used by multiple applications and you can't afford that any application breaks. So instead of being able to patch that one application where the security is needed, you now have to patch all of them.
> You can also argue that it is impossible to update dynamic libraries because they are used by multiple applications and you can't afford that any application breaks.
That's where maintenance branches comes in. You fix only the security issue, and push out a new version.
