Why don't you just turny our computer off then? It can't be exploited if it isn't actually running. Which is to say most people use a computer to run software,

Why don't you just turny our computer off then? It can't be exploited if it isn't actually running. Which is to say most people use a computer to run software, so if the software doesn't run the security is pointless anyway. Sure, if only some software breaks and you can wait for fixes that's a tradeoff, but given that in package maintainer land those fixes could be months or years away...