Yeah well, that's a nice theory.

In practice we live in a world that is cloud computing powered, we also need to update the tooling from outside sources.

Zero day exploits still exist and you need to keep your stuff up to date or someone from inside will be able to attack your whole setup by using a known vulnerability.

It's a big can of worm...