then you might as well take the bigger upgrades too. No? A specific patch for a vulnerability is often tiny, and upstream LTS kernel devs handles much testin

then you might as well take the bigger upgrades too. No? A specific patch for a vulnerability is often tiny, and upstream LTS kernel devs handles much testing. You test for issues, but the scope is tiny. The amount of churn to a new kernel is massive. It's not even close to the same work. And why do it? Whatever for? New isn't a good reason. Frankly, as long as the userland and kernel are getting security updates, who cares? Understand, this is a lot of work alone.