I get that, but when you roll back, you don't really control what else you're removing, and you're implying that a roll back wouldn't break other parts of the system, or that it even makes sense, given the state of the system (it could be years before a vuln is noticed).

Imagine waking up one morning and realizing you can't use uppercase on your file names anymore because of a rolled back vulnerability.