100% agree with this. I started my career backporting fixes to old Kernel's and it is error prone, time intensive, and certainly not catching every bug with security impact.

The focus of the industry should move to shipping up to date software in all devices, particularly in this infrastructure level software.