Testing isn't a rolling release, that's sid / unstable.

Testing is where the next stable (currently Stretch) is being worked out.

Except it's not, it's for testing.

Testing doesn't always get security fixes in a timely manner.

Read more at: https://www.debian.org/security/faq#testing

> testing is Debian's rolling release.

Except for when it freezes.