Why don't you just turny our computer off then? It can't be exploited if it isn't actually running.

Which is to say most people use a computer to run software, so if the software doesn't run the security is pointless anyway.

Sure, if only some software breaks and you can wait for fixes that's a tradeoff, but given that in package maintainer land those fixes could be months or years away...