Perhaps auditing tools should do something better than just comparing version numbers as released by upstream? Maybe Ubuntu LTS does less security backports th

Perhaps auditing tools should do something better than just comparing version numbers as released by upstream? Maybe Ubuntu LTS does less security backports than RHEL, but that doesn't make it better per se (saying this as an Ubuntu user).