I wonder why patches for individual security updates are pushed out individually instead of following the hard release process? We moved away from that in the

I wonder why patches for individual security updates are pushed out individually instead of following the hard release process? We moved away from that in the web / app space decades ago, it's hard to imagine saying "guys, we need to wait 3 months to fix an SQL injection vulnerability to avoid churn." Also...Mac updates are theoretically 'automatically installed', but somehow I have to notice and update, enter my password, and agree to restart and occasionally terms of service for every update which feels clunky.