Does an alarm clock really need constant updates?

I don't get this fixation on constant updates. If an app works, and risks are trivial, then what updates are required?

This app doesn't have internet access, or storage access. I'd say risks are almost non-existant.

And even for apps with storage or network access, again, if the other layers of your security are in place, and an app has nominal risks, constant updates aren't necessarily required. Keeping in mind that changes bring errors too.