Where To Visual Composer License

I just read that purchasing a template does not include the Visual Composer license. Is this true? I am concerned, because older versions of Visual Composer are a security risk. So to buy a template and then be subject to buy the plugin to keep your site secure kind of defeats the purpose of buying the template, which comes with plugins (rented I might say). Do I need to but Visual Composer? Just want to clear up the confusion.

If it is bundled with a theme then it is up to the author to update the VC version along with the theme as and when updates are released. (effectively it is their license).

Alternatively you can buy your own copy also

I sent the author a message. Thanks