That one component out of hundreds didn’t receive any updates for a long time doesn’t really make a point.

And the last release of qmail patches to support IPv6, SPF, dkim, and a few other useful things which do not come included?