A good chunk of the software on my device doesn't need to access the internet, another big chunk does so using standard mechanisms (i.e. libcurl) that could be security patched out of band by the OS.

The only reason I routinely need to update most software, is that Apple/Google keep changing device screen resolutions/cutouts and they keep killing off old APIs