Why should cluster components and node software follow a planned patch lifecycle?

1. Only application code can contain exploitable flaws
2. Patching automatically proves regulatory compliance
3. All patches are safe without compatibility testing
4. Known vulnerabilities can exist below application containers