It's not the slowness of releases, it's the fact they don't release any stable version with just security fixes. They only make new cumulative releases. Debian's model is to fix a version for their release and do security patches on that, not to push out the latest version.

I would guess this is the same reason why one can't change git repo history without affecting people working with the repo. Merkle tree all over the store.