Security patches ... are arguably necessary. Extending the scope of the changes to include updates to the Applications is going to produce chaos.
Not applications, the UI is where the problem is. Applications can have security issues too or have additional functionality added without causing much in the way of distress, but if the entire menu system is rearranged (e.g. drop-downs for ribbon) there might be a bit of trouble. Decouple functionality from cosmetics and things will get a lot better for all.
Biting the hand that feeds IT
