A docking system has many, many moving parts under significant stress, and not all of them are tested under the assumption that arbitrary software could drive their positions/torques beyond assumed limits. You can’t factory-reset metal fatigue after it has happened. It’s quite reasonable for NASA to say “this OTA update has to be tested and QA’d to the most rigorous standards.”