Re: "worth the extra security risk they inherently present"
This.
And the beauty of the scheme is, that due to the existence of the EULA, you can't even expect the OS to work as intended. No software in existence guarantees that it actually works, not the gratis stuff and not the paid-for stuff.
So, every bug is a feature, I guess.