I'd still like this particular rule relaxed for security updates, assuming adequate testing has been done of course. It doesn't seem appropriate to hold those back for arbitrary reasons and let users still go on using the vulnerable versions in the meantime.