@marcdw I agree with you.
The lack of updates of the various system applications and other webviews are very often pointed out, which I find normal. Being “privacy by design” does not mean being “secure by design” however the vital minimum of security must be reached.
I use the basic applications quite a lot (especially since they work quite well and I’m satisfied with them) because I also find it stupid to have to install a whole package of third party applications. That being said, as far as browsers are concerned, I use third party apps like Mull, FireFoxFocus, DDG), as internet browsing is probably more risky than using classic apps.
A solution would be to allow to remove the basic apps (but it’s not for now from what I understand).
But the most relevant solution as you say would be to be able to update native apps without having to update the OS.
And I understand perfectly the opinion of people who complain about the lack of security on the forum, especially when few things are necessary to be in the rules.
After that, it’s always easier to say than to do. So let’s be indulgent with the /e/ team who does a great job