In reply to Otto.

If the 3rd-party libraries are depended upon by plugins, then updating those libraries would be the responsibility of those plugins. Users wouldn't have to deal with them. Dealing with this in core wouldn't add any mental overhead for end-users.