Doesn't redhat do the same thing? They back port security patches to older unsupporteded versions?

If that's true, it means RHELs and RHEL clones have better security coverage.

Edit: No they don't, these security updates are for Ubuntu universe, which is basically ubuntus version of rpmfusion.