Citation needed. Not only Debian, but Red Hat, Suse, Canonical and others provide both free and paid security updates and many large companies are happy to pay

Citation needed. Not only Debian, but Red Hat, Suse, Canonical and others provide both free and paid security updates and many large companies are happy to pay quite a pretty penny for that.