That's kinda like claiming "a single implementation that everyone uses is no more secure/stable than a million independent implementations", which is fairly rid

That's kinda like claiming "a single implementation that everyone uses is no more secure/stable than a million independent implementations", which is fairly ridiculous. It's not (just) "pushing the problem further under the carpet", it's centralizing risk and attention and fixes, which does work out quite well in practice.