> that it would be even better for security to stop adding new features when they aren't absolutely necessary Even if features aren't necessary to sell your so

> that it would be even better for security to stop adding new features when they aren't absolutely necessary Even if features aren't necessary to sell your software, new hardware and better security algorithms or full on deprecation of existing algos will still happen. Which will introduce new code.