They have that ability because they (and only they) can update the OS. So, &quot;fixing that vulnerability&quot; prevents them from ever updating the OS again. You&#x27;re better off security-wise accepting their updates.