Debian testing puts you in a pretty bad place in terms of security updates; you're not getting new upstream releases as quickly as unstable/experimental, but they don't do dedicated backports of security fixes like with stable.