sacrifice the freedom to adopt every new version of every nondevelopmental
component and may, in some cases, have to replace components for which security
fixes are not forthcoming with more secure alternatives from other suppliers.
Security enhancements and patches announced by suppliers should be