I believe software of a certain complexity can't be finished and will always need updates, even if you exclude new features, as the whole eco system of hardware

I believe software of a certain complexity can't be finished and will always need updates, even if you exclude new features, as the whole eco system of hardware and software is constantly evolving around it. Here are a few reasons why: - bug fixes (as every non-trivial software has bugs) - improved security (as the kernel adds security functionality (capability dropping, sandboxing, ...), software can utilize this functionality to reduce its attack surface) - improvements of existing features (e.g. utilizing new CPU extensions or new algorithms for improved performance)