Security updates to fix zero-days? Google releases those very often and such forks take a long time to integrate them (even big forks) so I would not trust such

Security updates to fix zero-days? Google releases those very often and such forks take a long time to integrate them (even big forks) so I would not trust such a small team.