Debian Testing doesn't really have much in the way of security support, see https://www.debian.org/security/faq#testing
I see this misunderstanding all over the net — people think that Debian Testing is more supported than Debian Unstable, when the reverse is true. The Debian project has serious problems with public communications and expectation management.