But should distributing and ensuring the security of software that users install on their own systems even be the responsibility of operating system maintainers?
If I installed software through my OS package manager, where else would I get security updates from?!