One of the reasons why shared libraries are imporant is the easy with which a security fix in a library can be distributed and deployed: you only need to fix it in one place, and upgrade one library. And restart any process using the library.

To achieve the same thing with static linking, one needs to rebuild anything using the library, using the new library version, and upgrade the programs anywhere they're installed.

Vendored libraries additionally require upgrading the vendored version.