Do they really imperatively need to be compliant ? (i genuinely don’t know, but it seems weird to me, it feels like i can just postpone updates indefinitely on linux)

Or is this that it’s way better to be compliant, so companies need to enforce it on their computers (but individuals may not have this need) ?