Just makes sense that they would put the "heavy hitters" on feature development, not backporting security patches.