Oh, I'm not saying that they shouldn't have released this. Of course they should. It's just creepy how often OpenSSH and OpenSSL security fixes happen just before we do a release.
Don't forget LibreSSL, which dropped 3.7.1 today.
Maybe they're just triggering major releases whenever they get incoming security issue(s), to reduce release overflow?
OpenBSD is currently in release mode, 7.3 is due out in April. Happens every 6 months like clockwork.