This seems like a weak argument as an update could easily introduce new bugs with a security impact as well. Static linking gives a tested, known good executable. Running untested combos of libraries gives me some anxiety.
But when linking happens in some poorly maintained script, inside a custom build systen, written in two or more languages, running inside a docker container, executed by some year-old CI integration, patching security issues becomes impossible.
Given many dynamically linked binaries, it's relatively easy to patch say OpenSSL on a system.
If all binaries are statically linked, you need to relink all binaries and push new versions of each one.