I still don't understand why IE still mark Content Security Policy (CSP) under consideration given all other major browsers (Firefox, Chrome, Safari and Opera)

I still don't understand why IE still mark Content Security Policy (CSP) under consideration given all other major browsers (Firefox, Chrome, Safari and Opera) have at least some version of CSP implemented. I am actually very surprised they don't yet have HSTS implemented. IE is so much behind these security standard IMO. I don't know why they would push Web Crypto into 11+ when they don't even have CSP or HSTS implemented yet. Given the standard, they should have HSTS, then CSP, then Web Crypto and then subresource integrity (which will probably take another year or two to stabilize a final draft for v1). Is this list even up-to-date?