You act like a Heroku gives you a personal sys admin. At best, they keep your servers updated at a laggy pace to maintain major stability rather than security.

You act like a Heroku gives you a personal sys admin. At best, they keep your servers updated at a laggy pace to maintain major stability rather than security. Heroku is not a replacement for a sys admin. In fact, you get less with Heroku because you can't even access the systems running your code.