>bugfixes, security updates, and new features will come to you before they're either batched for release in the next minor version of RHEL or back-ported to the current supported releases.

Security fixes are not coming to CentOS Stream first. That's been in the announcement.