Comment by jagger27

Web browser engine, and OpenSSL (or equivalent) patches alone are the main concern in userspace. Those codebases are a constantly moving target. Look at the stream of CVEs and security patches that Apple publishes. Almost every bug affects every product because of how much code is shared up and down the stack.