Looking at all your comments in this thread and you really don't know what you are talking about. Just spreading FUD.

RHEL7 is the upstream for AL2 and there is a LOT of heavy lifting done by AWS. Newer kernel, newer toolchain, newer glibc. They do live patching. They actually test all sorts of workloads before even a minor errata update. They took OpenSSL 1.0.2 through FIPS validation with NIST.

Just stop talking.