In reply to mark k..

Not pushing security updates leaves a negative impression of the developer's dedication to the product IMO.