Yeah that is annoying, though personally i find browsers as the one category of software where i think this is fine, mainly because of security updates (it sucks that they tend to come with UI updates but at least on Firefox so far the main UI is fairly customizable and have made my own) but also because they are online software anyway.
Does a browser really have to be so complex that it warrants updates more often than the very sites that are being browsed? Contrast this with the design of idk MP3: a relatively simple and ultra-stable decoder app with a large variety of backend pipelines that can create MP3s. That's how the web pre-JS, pre-CSS was like. Or, with a perspective from information theory: downloading hundreds and hundreds of megabytes again and again (browsers), then consuming insane amounts of energy to access information that hasn't really changed all that much isn't very effective, is it?
>Does a browser really have to be so complex that it warrants updates more often than the very sites that are being browsed? Contrast this with the design of idk MP3: a relatively simple and ultra-stable decoder app with a large variety of backend pipelines that can create MP3s.
The problem is the recent trend that everything has to be a web application. So browsers aren't just to access information anymore, but literally to do everything else too. I personally don't agree with the web application trend, but this is the reason why a browser is so much more complex compared to an MP3 decoder: the decoder has to do a single thing, the browsers have to do more and more things.
Even your simple example, MP3 decoders, that do one thing, have had code execution exploits and other security issues over the years. WinAMP had CVEs for it.
All software will have bugs. I want my fixes fast and often to an environment where I run untrusted code from that many places.
Does it have to? I don’t know. But it is. It’s an operating system where 3rd parties execute random code on, and you hope it stays sandboxed. Those websites? Thanks to ads, they don’t update once in a while, but usually once every few seconds.
