The companies BUILD IN backdoors so that they can steal your data.
But because the backdoor is built in, they have to constantly monitor and update the security around it so that "bad guys" (they don't think they are the bad guys) don't get in.
They only do security updates to prevent liability iirc.
The whole thing stinks.
Note: I'm not a software developer just an outraged bystander with tech hobbies and techy friends, it's possible this isn't true.