Most of these points are wrong, eg: https://soapbox.pub/blog/mostr-zaps

Protocols have to interop WITHIN their ecosystem so they don't change often. The maintenance burden is in targeted attacks, not protocol upgrades.

Your culture point is correct.