This is why we need two separate channels for updates: One for security, and the other for features.
But, unfortunately, quite unlikely: it assumes extra thought must go into architecture and implementation. If you look around and see the current state of software industry, the rapid increase of entropy in software systems, the push of the market for cheaper, or completely free software, you'll find no pressure ever to deliver an "anti-feature delivery mechanism".
Plus, making a perfect product effectively puts you out of business. But ship a product that needs support, customization, training, consulting, periodic updates, maintenance - and you a rich man!