Most software companies end up doing this in the long run... Even Firefox is not immune. My guess as to why this happens is that all those engineers need something to do/something to show for (AKA fix what's not broken)... and I can't really blame them... I just wish that it would be possible to keep 2 branches of any given software; one with only security patches, and one with feature and security patches.