Just a quick note: debian stable has a new release every two years. So in the very worst case "decades" means like three years. The horror, the humanity, just remembering how software used to be three whole years ago causes me to shudder.
When I say maintainer spats, I'm referring to shit like how avconv was given undue credence for ages because the split happened right around a Debian release and the packager for ffmpeg on Debian was on the avconv side, which caused a false deprecation notice to be present for quite some time.
And yes, with how quick some software moves, two to three years can very much result in a mess of hacks and patches.
If you don't like the stable release, you could just run testing/unstable.
Well, yes. I agree with that statement even though you made it facetiously. Backporting security fixes only for bugs that have made enough noise to warrant it is a horribly janky hack. And, just thinking about all the time that has been, in my opinion, wasted on custom code that Debian maintainers have had to write in order to backport fixes makes me shudder.