I don't get why people bash things when they clearly don't understand the full context (pun intended ;)
If they can't/won't ship up to date third party software, they shouldn't ship the third party software at all.
It's not a lag, it's a deliberate avoidance.
OpenSSL is not GPL3. They still shipped a very old version, then apparently switched to LibreSSL... and promptly shipped an old version of that.
They lag. Licensing is an issue for a subset of tools, but lagging is very much an issue for all of them.
In the most recent Vendée Globe around-the-world sailing race, 11 people did not finish. https://en.wikipedia.org/wiki/Vend%C3%A9e_Globe#2016%E2%80%9... . Do you say they are lagging?
Some people start to hike the Appalachian Trail, stop part-way through, and decide to move to/live where they stopped. They never finish the trail. Are they lagging?
Why do you assume that you know what toyg means by "lag"?
OpenSSL is not GPL3. They still shipped a very old version, then apparently switched to LibreSSL... and promptly shipped an old version of that.
They lag. Licensing is an issue for a subset of tools, but lagging is very much an issue for all of them.