That's actually untrue. FYI -- use Debian almost exclusively, been doing so for 20+ years and love it. (Well mostly, the last 5-7 years have been rough though

That's actually untrue. FYI -- use Debian almost exclusively, been doing so for 20+ years and love it. (Well mostly, the last 5-7 years have been rough though.) What Debian provides, is security updates for 1 year after the next stable release. That's it. '5 years' is via LTS is volunteer support, provided by corporate and private donations, via a corporation in France. Their goal is to extend Debian oldstable's lifespan. The entire process is absolutely not the same as updates when running Debian stable. For example, due to its volunteer nature, companies get to decide where they 'put their money'. What packages are prioritized. Rare / unused packages may never be addressed, depending upon funding. Use PHP? Apache? The Linux Kernel? Sure, you'll see updates! Use rare package $x, and that may not happen, even though Debian Security would handle it. I can also tell you via experience, that QA is not quite as good as Debian proper. Still, is it a good thing? Sure! Is it managed by the Debian security team, 100% embracing all of its methods, and so on? NO. I felt it is important for you (and others) to know this. It's not as stable as Debian, not managed by Debian, and should ONLY be used as a stop-gap. You want stable? Stay on Debian managed security updates!