> Many distributions have a dedicated security team that has to sign off any patches to security-critical software This is false. Debian has a security team an

> Many distributions have a dedicated security team that has to sign off any patches to security-critical software This is false. Debian has a security team and it's way more active than most distributions. > But it's also made for a culture where packagers think they know better than upstream maintainers Yes and for good reasons.