Do you use any RSS feed aggregator?
from a system administration standpoint, when some library needs a security patch, you patch your source, then recompile and install that library. Only in one place, then anything dependent on that library uses the patched .so file.
In your model, every single program has it's own set of libraries and it's own full operating system, so when something needs patches, you have to patch every single program on the entire system separately. There is a reason *nix does not copy Windows in this regard.