Apple created and designed the update system for their operating system from scratch. The fact it doesn't include the ability to update a security-critical file quickly is entirely their fault.
Most (if not all) of the popular BSDs managed to ship the update ages ago. I would expect a trillion dollar company like Apple to have better and more thoughtful engineering than random volunteer projects.