IIRC, "a heck of a long time" refers to the time elapsed since the initial release of OpenBSD in July 1996.

Patches for vulnerabilities are listed per release on https://www.openbsd.org/errata.html