What advantage do I gain from this over periodically running various distro tools that compile CVEs and security advisories into a flat file database and search on top of that, e.g. pkg audit on FreeBSD and glsa-check on Gentoo?
It's definitely a leg up over just being spammed by pkg audit.
Further, we also cover your app dependencies :).