Who decides whether a computer is "unpatched"? What patches are needed? To all running software? To system software? What is system software?

What about patches that bring new features that introduce new vulnerabilities? Can I claim I didn't want the update because I was concerned about the new AI thingy introducing EVEN more security issues and turning my reasonably secure, mostly patched, computer into your "loaded gun"?