This is true, but the vast majority does (if you use EPEL and RPM Fusion). I've also had pretty good luck using Fedora rpms from the same era. Gotta stay on top of CVEs tho so you don't end up running a vulnerable application.