"receive patches, including security patches, unless it purchases" . . . .