Yah, it sounds that way. Rolling forward to the head is required to get the most recent security updates. Which isn't that far away from how centos works today

Yah, it sounds that way. Rolling forward to the head is required to get the most recent security updates. Which isn't that far away from how centos works today. With rhel you get security updates for the point releases (8.1,8.2,etc) for a while after the new point release comes out. With centos, the day that the newer version drops, they don't tend to roll security updates into the older ones.