> and thereby not have any security vulnerabilities That's not what running on master means. It means that all of your (many) security vulnerabilities are ones

> and thereby not have any security vulnerabilities That's not what running on master means. It means that all of your (many) security vulnerabilities are ones you don't know about[1] and random things keep breaking for no reason (and when you report them, it breaks in a way that's just different enough to let your bug report be closed as FIXED). 1: except (if you pay attention) the ones the developer advertises as 'features', like ssh with a default password of "password" baked into the kernel for "inventory management".