I think that labeling point release distribution package managers as insecure because they are sub-optimal for a certain use case (updating web applications) se

I think that labeling point release distribution package managers as insecure because they are sub-optimal for a certain use case (updating web applications) seems a tad too excessive. Having software go through a decent distribution's packaging process not only provides stability guarantees, but also off-loads many tasks that you would otherwise have to preform on a per-project/per-developer basis. I perfectly satisfied with the trade offs.