The reason for the <i>&quot;freeze version and backport security fixes only&quot;</i> is that users need to be absolutely confident that when they ask for security updates, nothing else will mysteriously break.