With Ubuntu, anything not in the main repo (universe, etc) doesn't get security updates.

From personal experience, I've broken way more ubuntu installs on a release-upgrade than I have on debian (zero).