when you get all the way down to the bottom of some software's stack, it is relying on system libraries. and those are updated for good reasons much of the time. security, vulnerabilities, hardware compatibility, etc.

very few pieces of software write their own TCP/IP stack, for instance. SSL.. etc. when these things need to be patched they really need to be patched.