It delays everything. You can manually override some packages, but the community can't push through it.
Unless maybe you give special permission to some trusted company to designate certain releases of packages they don't own are security patches... But that sounds untenable.