> And which one of them has a better track record pushing out security fixes, especially for older software?

Why the question? I was only trying to state what I think is fact, not sell one approach or another.