Most software you use doesn't inject shoddy, high-risk code into nearly every running process on your system and the kernel, though.
If my music player compromises my computer, at least it plays music the rest of the time. If my antivirus compromises my computer... well, adding security was its only job. I'm happy to criticize shoddy code when it causes the product to fail at its sole purpose.