[vbezhenar]

> requires recompiling with patches from source

I don't think that's true. There's pkg_add and syspatch and those are preferred methods for upgrading your system. You can recompile things from source and I think that it's an awesome feature for hacker, who wants to tinker with sources of some package, but that's not the only way.

[fluffything]

Between distro releases, if you want to apply security patches, you need to recompile from source, because there are no binary releases.