The stuff with licenses Apple likes is relatively up to date; it's definitely not bleeding edge, but no worse than you'd get from Debian or RHEL. The criticism macOS gets for shipping ancient software is because one of the licenses they don't like is the GPL3. So there's a GPL2 version of bash from 2007, rsync is from 2006, etc. The end user can, of course, install newer versions of these separately.