Why would they take so long anyway and be behind volunteer run projects like debian? Is it something about corporate shenanigans and testing? because afaik in fedora for example firefox is always behind in security updates compared to debian.