Many are upgradeable, though it's the common libraries that people use that matter. The Ethereum ones have been battle hardened over years of exploits so you can use them just like you can build on common Unix primitives to avoid mistakes in new projects.