Poster wants a "total ban", you can only deduce that means vulnerability management also.

Or you could read the proposal and deduce nothing.

It explicitly excludes security fixes.