"If your software need security maintainance it mostly has a failed architecture from the get go."
There are plenty of open source libraries, that many software developers used in their applications, that have had to have security updates. No software will be 100% secure.
"Like 9/10 apps need no internet connectivity at all"
This might have been true 10 years ago. Almost all apps people want need internet connectivity.