You seem to be interpreting it as the software changes not making a difference to the security stance.