And for some reason I used to think security patches get back ported to all the supported versions and by not upgrading I was only missing out on new features.

Thanks for letting me know that’s not correct!