Distros are backporting security patches into their releases, so no harm done. If you rely on the python.org releases and don't build from source, then yes, that is a bit sad.
Case in point: The Debian security tracker, see their notes section referencing each commit.