> However, the maybe more critical issue is about other independently installed software, or maybe closed source software, where you will not automatically get

> However, the maybe more critical issue is about other independently installed software, or maybe closed source software, where you will not automatically get an update once some library gets updated. If you care about security, you shouldn't be running closed source software anyway, at least not outside of a container. Statically linked binaries for open source software, containers for everything else, and you're good to go.