Let's say they do and only 5% are "security issues" you still need to update either way.