The latest 2.7 seems to have a lot of CVEs (did not verify that manually though)
https://www.cvedetails.com/version-list/10210/18230/10/Pytho...
IIRC some commercial distros maintain patches for 2.7 but then you're paying for being 15 years behind the future.