You have an army of volunteers backporting patches, in the case of Debian. It's been done, but it takes a certain amount of support.