Sadly, Apple always gives the "latest and greatest" version all the security updates, and is more selective about backports, see here: https://support.apple.com

Sadly, Apple always gives the "latest and greatest" version all the security updates, and is more selective about backports, see here: https://support.apple.com/en-gb/HT212814 https://support.apple.com/en-gb/HT212814 for stuff you're unprotected from if you stay on iOS 14. This includes arbitrary code execution with kernel privileges. This has been the case for a long time for Apple, which forced me to break my Catalina boycott (remember the macOS Vista stories here?) because I don't want unfixed, publicized 0days on my machine.