True, but it is also an easy way to keep your software up to date which is in itself a security feature. So a bit of a trade off.