In default install. Every so often I click updater and there are updates for CVEs. Why didn't you ask me Ubuntu? Why did you let me run software with known publ

In default install. Every so often I click updater and there are updates for CVEs. Why didn't you ask me Ubuntu? Why did you let me run software with known public vulnerabilities longer than is necessary?? I'm also befuddled why it sometimes prompts for password and sometimes doesn't, and I can't insure that the prompt is that of updater so I have to drop in shell and use apt. Or that it will happily let processes with updated binaries run and not ask to restart them. Ubuntu is a joke, but then half other distros are or I can't evaluate the leadership satisfactorily to know if it's a joke (e.g. as I suspected, Mint turned out to be one as they managed to release hijacked isos twice in a row). </rant>