> using thing that are a while out of date and may have security flaws as a result On the contrary, on distributions that perform security updates the level of

> using thing that are a while out of date and may have security flaws as a result On the contrary, on distributions that perform security updates the level of security of a package can only increase over time. It might sound obvious but vulnerabilities are created in new releases, while vulns in existing packages can be only be found and fixed, not created. (Of course I'm talking only about vulnerabilities here and excluding removal of obsoleted crypto or addition of new security features)