It's same problem we have when libraries get massive security vulnerabilities. Updating them is not always as easy as many would like.