Which is why I explicitly mentioned security stuff being backported. Maybe it wasn't clear enough, but yes, I agree that security updates need to be released faster in many cases, and need a special handeling. The amount of work involved in handeling security patches is probably why it hasn't happened yet.