How do you know these blobs fix anything and aren't just padded up for checksum dofference? Do you disassemble and analyze these things? Do you trust companies?

In my experience, most security patches are future proofing. What's wrong with having a locked down firewall, not running weird software, and setting up apparmor or selinux?