security updates aren’t locked behind an account