Yeah, security issues could be introduced as well, but I think we're going further from the point that it's about incentive and development goals getting pushed onto a single codebase, i.e centralized codebase and no other options besides not upgrading