Linux falls under the second category where they don't really care about securing their users. They think it's okay for a ton of servers of their operating system to exist with vulnerable services running. Every company has to dedicate duplicate resources into keeping servers up to date.