This is the answer. I run a shop where most systems are on a 1, 3 or 5 year upgrade cycle and all operating systems and applications get security patches within

This is the answer. I run a shop where most systems are on a 1, 3 or 5 year upgrade cycle and all operating systems and applications get security patches within 30 days of release. It’s considered cutting edge in my industry. That includes servers and every last workstation in the place. Hell, even firmware on zero clients gets updated for security fixes. We are doing multiple major upgrades every year and patching the shit out of dozens of applications on over 1000 endpoints on a monthly basis. The applications are more important than the OS. I can’t be in a situation where I’m forced to upgrade or migrate a major system because the operating system no longer receives patches. It screws up everything - and not just my stuff. Users and corporate trainers don’t like unexpected and unnecessary upgrades either. There are distributions I prefer for personal projects that I won’t touch at work. An environment like mine is where Red Hat and Microsoft shine, although Microsoft has been a pain in the ass lately with their cumulative updates and 6 month rolling releases on the desktop.