Do they actually do this? AFAIK, almost all the system apps are bundled with the OS, and don't recieve any updates after the next version is released; the last time I remember them ever releasing a security update for an old version was the certificate validation issue a few years ago.